NoiseLetter March 2026

Table of Contents
Loading nav...

Events, events… and yes, even more events. 🌍 GreyNoise has been on the move. March kept us busy with stops at eCrimes in London and SecIT in Hanover—but we’re just getting started. Over the next few months, we’ll be hitting the road for CrowdStrike CrowdTours across eight cities, heading to Glasgow to speak and sponsor CyberUK, and making our way to Tampa for H-ISAC. If you’ll be at any of these (or nearby), we’d love to connect.

And while we’ve been racking up miles, we haven’t slowed down on the research front. We’ve just released some exciting new findings—with even more coming in the next few weeks—so keep an eye out.

Thanks, as always, for being part of the GreyNoise community.

Featured

About this new report

Every enterprise firewall processes traffic from residential IP space. Traditional reputation feeds fail to flag IPs that rotate before they can be cataloged.  Unfortunately, attackers know this too. GreyNoise analyzed 4 billion sessions over 90 days and found that 39% of unique IPs targeting the edge come from home internet connections — and 78% vanish before any reputation system can flag them.

This report quantifies the residential proxy threat at internet scale and identifies what defenders can do about it. Download Today >>

Where to find us

Fresh Content

Recent Tags and Vulnerabilities

GreyNoise Labs released 166 tags during the month of March:

Community

  • GreyNoise Block is available now with a free trial for 14 days. Test it out to build, manage, and deploy GreyNoise blocklists.
  • Try our Free Account - Quickly identify noisy scanners and trending attacks with our free plan.
  • Request a New GreyNoise Tag - Check out our page where our amazing community can submit tag requests to the GreyNoise team. 
  • Join our Community Slack + Discord- We share intel, give real time updates, and the occasional Dad joke. 

Meme of the Month

Not subscribed to our NoiseLetter? Subscribe here.

Read the transcript

Events, events… and yes, even more events. 🌍 GreyNoise has been on the move. March kept us busy with stops at eCrimes in London and SecIT in Hanover—but we’re just getting started. Over the next few months, we’ll be hitting the road for CrowdStrike CrowdTours across eight cities, heading to Glasgow to speak and sponsor CyberUK, and making our way to Tampa for H-ISAC. If you’ll be at any of these (or nearby), we’d love to connect.

And while we’ve been racking up miles, we haven’t slowed down on the research front. We’ve just released some exciting new findings—with even more coming in the next few weeks—so keep an eye out.

Thanks, as always, for being part of the GreyNoise community.

Featured

About this new report

Every enterprise firewall processes traffic from residential IP space. Traditional reputation feeds fail to flag IPs that rotate before they can be cataloged.  Unfortunately, attackers know this too. GreyNoise analyzed 4 billion sessions over 90 days and found that 39% of unique IPs targeting the edge come from home internet connections — and 78% vanish before any reputation system can flag them.

This report quantifies the residential proxy threat at internet scale and identifies what defenders can do about it. Download Today >>

Where to find us

Fresh Content

Recent Tags and Vulnerabilities

GreyNoise Labs released 166 tags during the month of March:

Community

  • GreyNoise Block is available now with a free trial for 14 days. Test it out to build, manage, and deploy GreyNoise blocklists.
  • Try our Free Account - Quickly identify noisy scanners and trending attacks with our free plan.
  • Request a New GreyNoise Tag - Check out our page where our amazing community can submit tag requests to the GreyNoise team. 
  • Join our Community Slack + Discord- We share intel, give real time updates, and the occasional Dad joke. 

Meme of the Month

Not subscribed to our NoiseLetter? Subscribe here.