Skip to content
Install MCP

Threat feed

AlienVault OTX Pulse

Last fetched

General Blacklists · refreshed hourly · last verified

AlienVault OTX Pulse is a General Blacklists threat-intelligence feed, refreshed hourly, indexed by WhisperGraph.

Live data for this page is temporarily unavailable.

The graph returned an error for this lookup. Refresh in a moment to retry — fresh data is fetched on the next visit.

What is AlienVault OTX Pulse

AlienVault OTX Pulse is the community-submitted indicator feed from AT&T Cybersecurity's Open Threat Exchange platform, distinct from the IP-reputation-only OTX feed already indexed here. A "pulse" is a curated collection of indicators an OTX community member publishes around a specific campaign, malware family, or investigation, and the aggregated Pulse feed spans the full mix of indicator types (IPs, domains, hashes, URLs) contributed across the whole community rather than one narrow category. Because contribution is open to any registered OTX user, quality varies by contributor, but the platform's scale makes it one of the largest community threat-sharing networks in operation. It is indexed here as the broader, community-curated counterpart to OTX's dedicated reputation feed.

Source
https://otx.alienvault.com/
Refresh cadence
hourly

Indicators currently listed

Related pages

Pivot from AlienVault OTX Pulse into the indicators it lists.

Queries

Resolves the feed's categories.


MATCH (f:FEED_SOURCE {name: $slug})
OPTIONAL MATCH (f)-[:BELONGS_TO]->(c:CATEGORY)
WITH f, collect(c.name) AS categories
RETURN f.name AS slug, f.id AS id, categories
Run yourself →

The indicator-kind rollup and sample listed above.


MATCH (f:FEED_SOURCE {name: $slug})<-[:LISTED_IN]-(x)
WITH labels(x)[0] AS kind, count(*) AS listed, collect(x.name)[0..5] AS sample
RETURN kind, listed, sample
ORDER BY listed DESC
Run yourself →

Or query Whisper from your own LLM workflow via the Whisper MCP server.