Look up an IP from an alert before deciding what to investigate next.
Copy a prompt into your agent with the oo Skill installed. Add your page links and source notes before running it.
Summarize scanning and benign-service signals without treating them as a final verdict.
/oo GreyNoise: Look up [IPv4 address] and summarize the noise, benign-service, and classification signals. Include the Visualizer link if available.
Set up oo CLI and the oo Skill in your agent.
Install OOMOL →No account connection or API key is required.
Connect GreyNoise →Use /oo with the pages to read, the changes to make, and where to save the result.
Connection Guide →Choose Your Agent
Query GreyNoise Community for scanning observations, known benign services, classification, and a link to the IP’s Visualizer page. A missing observation does not establish that an address is safe.
Read Community observations and classification for an IPv4 address.
Look up an IPv4 address in the GreyNoise Community dataset. Returns whether the IP is internet background noise, whether it is a known-benign service, and its classification. The Community endpoint is free, needs no API key, and is throttled per source IP.
Leina 
Wanta greynoise.lookup_ip No matching tools.
No. It means the Community dataset has no matching observation; assess it alongside your other evidence.
Manage which optional storage OOMOL can use. You can change these choices from the footer at any time.