NoiseLetter November 2025

Table of Contents
Loading nav...

Happy December! The holiday season is here...along with travel, warm drinks, and inevitably serving as the family IT helpdesk. This month’s NoiseLetter is packed with good stuff: we’re rolling out Query-Based Blocklists for real-time, fully configurable threat blocking, sharing a quick SuriCon recap (including the Labs team’s chilly adventures in Canada), and giving you a handy holiday tip. When you’re visiting family, run our free IP Check to instantly see whether their home network has been compromised, it’s fast, easy, and saves you from holiday tech chaos.

Bob Unfiltered

VP of Data Science + Research, Bob Rudis, creatively gives his thoughts, hot-takes, and whatever else he feels like.

Featured

Query-Based Blocklists: Fully Configurable, Real-Time Threat Blocking in the GreyNoise Platform

Attackers move fast, and now your defenses can too.
You can turn any GreyNoise query into a real-time, dynamic blocklist for your firewall, SOAR, or other enforcement points. These blocklists update continuously, adapt as attacker infrastructure changes, and are fully configurable to your organization’s risk tolerance.

Built directly into the GreyNoise platform, query-based blocklists let you use the full depth of GreyNoise metadata and instantly convert existing GNQL queries into live, auto-updating feeds, no extra setup required.

Available now for all GreyNoise platform customers.

Learn More >>

Product Announcements

Your IP Address Might Be Someone Else's Problem (And Here's How to Find Out)

Home networks are increasingly hijacked for scanning and malicious activity, often without anyone noticing. GreyNoise IP Check lets anyone see, in seconds, whether their IP has been observed scanning the internet or behaving suspiciously. No signup, no friction—just a clear verdict and guidance on what to do next.

Check it Out >>

Are you interested in time travel through network packets?

We’re looking for Active Development Partners who would like to engage in security research by applying Suricata Rules and network packet queries to the GreyNoise historical dataset. If you're interested, please email product@greynoise.io.

Where to find us

  • Black Hat EU Happy Hour (In-Person | Dec 10) Had a full day at Black Hat EU? Come put your feet up with GreyNoise and Corelight for a laid-back evening with complimentary drinks, nibbles, and great conversations. Learn More >>
  • GreyNoise University LIVE (Virtual | Dec 18) GreyNoise 101, now known as GreyNoise University LIVE is BACK! We are stoked to bring back this once-a-month webinar.  Learn More >>

Fresh Content

Recent Tags and Vulnerabilities

GreyNoise Labs released 27 tags during the month of November:

Community

  • Request a New GreyNoise Tag - Check out our page where our amazing community can submit tag requests to the GreyNoise team. 
  • Try our Free Account - Quickly identify noisy scanners and trending attacks with our free plan.
  • GreyNoise Block is available now with a free trial for 14 days. Test it out to build, manage, and deploy GreyNoise blocklists.
  • Join our Community Slack and Discord- We share intel, give real time updates, and the occasional Dad joke. 

Meme of the Month

Happy circle back season ✨

*Have a joke you want included in the next NoiseLetter? Submit Your Joke >>

Life @ GreyNoise

Not subscribed to our NoiseLetter? Subscribe here.

Read the transcript

Summary

Happy December! The holiday season is here...along with travel, warm drinks, and inevitably serving as the family IT helpdesk. This month’s NoiseLetter is packed with good stuff: we’re rolling out Query-Based Blocklists for real-time, fully configurable threat blocking, sharing a quick SuriCon recap (including the Labs team’s chilly adventures in Canada), and giving you a handy holiday tip. When you’re visiting family, run our free IP Check to instantly see whether their home network has been compromised, it’s fast, easy, and saves you from holiday tech chaos.

Bob Unfiltered

VP of Data Science + Research, Bob Rudis, creatively gives his thoughts, hot-takes, and whatever else he feels like.

Featured

Query-Based Blocklists: Fully Configurable, Real-Time Threat Blocking in the GreyNoise Platform

Attackers move fast, and now your defenses can too.
You can turn any GreyNoise query into a real-time, dynamic blocklist for your firewall, SOAR, or other enforcement points. These blocklists update continuously, adapt as attacker infrastructure changes, and are fully configurable to your organization’s risk tolerance.

Built directly into the GreyNoise platform, query-based blocklists let you use the full depth of GreyNoise metadata and instantly convert existing GNQL queries into live, auto-updating feeds, no extra setup required.

Available now for all GreyNoise platform customers.

Learn More >>

Product Announcements

Your IP Address Might Be Someone Else's Problem (And Here's How to Find Out)

Home networks are increasingly hijacked for scanning and malicious activity, often without anyone noticing. GreyNoise IP Check lets anyone see, in seconds, whether their IP has been observed scanning the internet or behaving suspiciously. No signup, no friction—just a clear verdict and guidance on what to do next.

Check it Out >>

Are you interested in time travel through network packets?

We’re looking for Active Development Partners who would like to engage in security research by applying Suricata Rules and network packet queries to the GreyNoise historical dataset. If you're interested, please email product@greynoise.io.

Where to find us

  • Black Hat EU Happy Hour (In-Person | Dec 10) Had a full day at Black Hat EU? Come put your feet up with GreyNoise and Corelight for a laid-back evening with complimentary drinks, nibbles, and great conversations. Learn More >>
  • GreyNoise University LIVE (Virtual | Dec 18) GreyNoise 101, now known as GreyNoise University LIVE is BACK! We are stoked to bring back this once-a-month webinar.  Learn More >>

Fresh Content

Recent Tags and Vulnerabilities

GreyNoise Labs released 27 tags during the month of November:

Community

  • Request a New GreyNoise Tag - Check out our page where our amazing community can submit tag requests to the GreyNoise team. 
  • Try our Free Account - Quickly identify noisy scanners and trending attacks with our free plan.
  • GreyNoise Block is available now with a free trial for 14 days. Test it out to build, manage, and deploy GreyNoise blocklists.
  • Join our Community Slack and Discord- We share intel, give real time updates, and the occasional Dad joke. 

Meme of the Month

Happy circle back season ✨

*Have a joke you want included in the next NoiseLetter? Submit Your Joke >>

Life @ GreyNoise

Not subscribed to our NoiseLetter? Subscribe here.