Threat feed
Binary Defense Banlist
Last fetched
General Blacklists · refreshed daily · last verified
Binary Defense Banlist is a General Blacklists threat-intelligence feed, refreshed daily, indexed by WhisperGraph. WhisperGraph currently records 2,130 indicators listed by it.
What is Binary Defense Banlist
Binary Defense Banlist is a daily-refreshed deny-list of IP addresses observed by Binary Defense's managed-detection-and-response operations engaging in mass scanning, exploitation, and credential-stuffing campaigns. Entries are derived from the firm's own sensor network and from collaborator feeds, then filtered to remove residential and large-cloud egress addresses to keep false-positive rates low. The list is widely deployed at perimeter firewalls and as a SIEM enrichment overlay; it is one of the few free reputation lists curated specifically with enterprise environments in mind. It is indexed here as a record for outbound-block playbooks.
- Refresh cadence
- daily
Category drift. The curated category for this feed is General Blacklists, while WhisperGraph currently files it under blacklists.
Indicators currently listed
2,130 indicators across 2 node types.
Related pages
Pivot from Binary Defense Banlist into the indicators it lists.
Queries
Resolves the feed's categories.
MATCH (f:FEED_SOURCE {name: $slug})
OPTIONAL MATCH (f)-[:BELONGS_TO]->(c:CATEGORY)
WITH f, collect(c.name) AS categories
RETURN f.name AS slug, f.id AS id, categoriesThe indicator-kind rollup and sample listed above.
MATCH (f:FEED_SOURCE {name: $slug})<-[:LISTED_IN]-(x)
WITH labels(x)[0] AS kind, count(*) AS listed, collect(x.name)[0..5] AS sample
RETURN kind, listed, sample
ORDER BY listed DESCOr query Whisper from your own LLM workflow via the Whisper MCP server.