In this video we're taking a look at grey noise.
It can be found at vs Grey noise.
I o.
And also I have this on the Start Me page.
So Greynoise is interesting in that we can put IP addresses, CVS tags and whatnot.
And this is for this demonstration.
It's really good for if we're pulling up IP addresses, whether we have a IP address we're investigating
or we're doing a.
A look up on a website.
Of course, we can pull up a terminal here and we can do ping and whatever the URL is, say Google.com
to get that IP address.
Okay, let's cancel out of that and we can put different IPS in here and see get some information on
it.
So.
I was going to take a malicious or spam email and pull that URL.
However, those tend to go away pretty quick.
They're usually short lived URLs.
So let's take a look at up in here.
There's trends today tags, analysis, alerts.
I'm just going to click on today and see if anything came up.
So we have some pretty cool ones in here.
We can see this is malicious.
This is a mobile.
We have the IP address organization Chinanet Backbone actor is unknown, last seen country.
And if we click in here, we can see the information that if we put that IP address in here and right
off the bat we get this is a malicious IP greynoise identify malicious activity of this IP.
Okay.
I'm going to click on next and suggested actions, which is great.
And we can see again the organization we can see the actor is unknown if it's spoofed, if it's able
to spoof it first seen last seen country city region as an OS, we can see different tags, ssh brute
force or telnet, brute force or web crawler.
We can see the different ports.
TCP 21, 22, 23, 7110.
There's 33 more that we can go in here and we can see they're all TCP.
We could see if there's any paths.
User agent detected, fingerprint information, if there is any, and hash fingerprints if there is
any.
So, again, this is a lot of great information that we can pull from IP addresses using this site.
And we can take a look at different trends and different tags and and various analysis.
Now, I'm just using the free version.
If you go ahead and sign up, you can get access to to more reports.
But again, this is a really great website that we can potentially use for those IP addresses that we
find.
And again, we can find this over at Visit Gray Noise.
IO, thank you so much for watching.