Skills
.Work. You
Rest

lookup-greynoise

Official

Classify IPs as noise vs targeted activity

Data & Analytics#riot#threat-intel#ip-analysis#noise-filtering#greynoise#ip-classification#benign
AuthorLiberty91LTD
Version1.0.0
Installs0

System Documentation

What problem does it solve?

GreyNoise classification helps security teams quickly distinguish internet background noise from targeted IP activity, reducing wasted analysis time.

Core Features & Use Cases

  • Classifies an IP as noise versus riot and provides a classification (benign, malicious, unknown) along with an actor name when available.
  • IP-only lookups with retrieval-only context, ideal for triaging indicators and filtering mass-scanning traffic from alert lists.
  • Integrates into incident response workflows to surface meaningful signals while suppressing non-actionable noise.

Quick Start

Run the GreyNoise CLI to classify an IP by invoking node tools/clis/greynoise.js ip <ip> and optionally use --dry-run to preview.

Dependency Matrix

Required Modules

None required

Components

Standard package

💻 Claude Code Installation

Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.

Please help me install this Skill:
Name: lookup-greynoise
Download link: https://github.com/Liberty91LTD/cti-skills/archive/main.zip#lookup-greynoise

Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
View Source Repository

Agent Skills Search Helper

Install a tiny helper to your Agent, search and equip skill from 471,000+ vetted skills library on demand.