plugmyagent

GreyNoise Community API

Threat Intel No key

AuthenticationNo key
Rate limitCommunity tier: about 50 lookups/week shared with the web visualizer for free accounts; unauthenticated use is more limited.

Documentation: docs.greynoise.io ยท Checked Sep 13, 2026

About

GreyNoise runs sensors across the internet that watch mass scanning and opportunistic attacks, so it can tell you whether a suspicious IP is just background noise (a known scanner, search engine, or benign service) or something that has never been seen scanning. Which could mean it's targeting you specifically. The free Community API needs no key for basic use and returns a simple verdict: noise, riot (known benign service), or not seen. A free account raises your allowance.

Details

No key needed. You can call it right away.

Auth: No key

Rate limit: Community tier: about 50 lookups/week shared with the web visualizer for free accounts; unauthenticated use is more limited.

Verified: 2026-09-13

Best for: personal developer business

Read the docs Back to catalog

Setup

  1. No signup needed to try it: paste an IP onto the example URL in your browser.
  2. Read 'noise' (mass scanner), 'riot' (known benign service), and 'classification' fields.
  3. For more lookups, create a free account on the Visualizer and use your API key in the 'key' header.
  4. Treat 'not seen' results as potentially targeted. Investigate those first.
Sign up