Malicious IP scanning detection tool unveiled

The GreyNoise IP Check free tool has been rolled out by GreyNoise Labs to help people find out if their IP address has been involved in harmful internet scanning, BleepingComputer reports. The company said this problem has grown quickly over the past year as many users unknowingly become part of botnets or residential proxy networks. "Sometimes folks knowingly install software that does this in exchange for a few dollars. More often, malware sneaks onto devices, usually via nefarious apps or browser extensions, and quietly turns them into nodes in someone else's infrastructure," GreyNoise said. The tool gives three possible results: clean, malicious/suspicious, or common business service. When scanning activity is found, the site also shows a 90-day timeline that can help users trace when their device may have been compromised. The company also offers a simple JSON API for technical users. If an IP is flagged as "malicious/suspicious," users are urged to run malware scans, update devices, disable unnecessary remote access, and change admin passwords.