A GreyNoise alternative built on your own decoys

Noise feeds like GreyNoise are useful: they tell you an IP is mass-scanning the internet, so you can filter it out. But they are a shared, second-hand view. A deception network gives you something stronger: a first-party view of how you are being attacked, with the full payload, and the ability to act.

First-party beats second-hand

When an attack lands on your decoy you get the exact request bytes, the session, the stage-2 loader and the attacker infrastructure, not just a reputation label. You can score whether the technique is genuinely new, and one click scans the attacker's own infrastructure back.

You still get the noise view

huntback classifies every source (VPN, proxy, Tor, datacenter, scanner) and cross-references it with what lands on the network, so you keep the "is this just noise?" answer and get the deep, first-party detail.

See both

Browse the live CVE exploitation index, try the IP classifier, or start free and deploy your own decoys.