GreyNoise: Knowing the difference between benign and malicious internet scans

GreyNoise is a search engine of all open ports and services on the internet. Shodan, Censys, Sonar and ShadowServer scan IP addresses from fixed IP subnets. Greynoise aims to help enterprises tell the difference between targeted and omnidirectional scanning to better defend themselves. A lot of those scanners are popped IoT devices looking for opportunistic targets. GreyNoises has published findings on what devices are attacking thermostats, Oracle Web Logic servers, Mikroik routers.”]

Source: https://www.csoonline.com/article/3273109/greynoise-knowing-the-difference-between-benign-and-malicious-internet-scans.html