Threat-intelligence feed
Brute ForceLast verified Page fetched
Brute Force Blocker is a brute force threat-intelligence feed tracked by WhisperGraph as a FEED_SOURCE node. The Whisper Internet Directory publishes this page so security analysts and LLM agents can link to it as a stable record for Brute Force Blocker.
Brute Force Blocker is a long-running OpenBSD-derived community feed of IP addresses observed performing SSH brute-force attacks against participating hosts. The collection mechanism is a small reporting daemon that watches authentication logs and submits offending IPs to the central project; the published list is the union of all participants' reports over a rolling window. The feed has a reputation for low false positives because the contributing population skews toward administrators of internet-exposed BSD and Linux servers — the exact environments where SSH brute force is most disruptive. It is indexed here as a stable, decade-old record for SSH abuse research.
FEED_SOURCE node not currently in WhisperGraph. The editorial entry for Brute Force Blockeris committed to the directory but the corresponding graph node is missing — typically a transient state during the threat-feed import pipeline's between-runs window. The page will reconcile on the next revalidation.
Indicators: Computing — check back later. The precompute pipeline is building this feed's indicator sample from the host corpus and will populate the count and representative addresses on an upcoming run.
Look up which threat feeds list a given IP — the indicator-anchored query that powers the threat card:
MATCH (ip:IPV4 {name: $ip})-[:LISTED_IN]->(f:FEED_SOURCE)
WHERE f.name = "Brute Force Blocker"
WITH f
MATCH (f)-[:BELONGS_TO]->(c:CATEGORY)
RETURN f.name AS feed, c.name AS categoryVerify the feed's graph-side identity directly:
MATCH (f:FEED_SOURCE {name: "Brute Force Blocker"})
OPTIONAL MATCH (f)-[:BELONGS_TO]->(c:CATEGORY)
RETURN f.id AS id, f.name AS name, c.name AS categoryOr query Whisper from your own LLM workflow via the Whisper MCP server.
Pivot from Brute Force Blocker into adjacent entities.