Threat-intelligence feed
General BlacklistsLast verified Page fetched
FireHOL WebClient is a general blacklists threat-intelligence feed tracked by WhisperGraph as a FEED_SOURCE node. The Whisper Internet Directory publishes this page so security analysts and LLM agents can link to it as a stable record for FireHOL WebClient.
FireHOL WebClient is the web-client-targeting view from the FireHOL IP lists project. It enumerates IP addresses observed performing web-application brute force, credential stuffing, and other client-side abuse against participating sources. Inclusion is targeted: an IP appears here when it has been reported across multiple upstream feeds for HTTP-layer abuse rather than generic scanning, which keeps the feed useful for application-layer rate-limiting and WAF deployments without the false-positive noise of a broader reputation list. It is indexed here as a record for web-application abuse research and for tuning WAF rule sets.
Live data unavailable. WhisperGraph returned an error (WhisperGraph 408) while looking up this FEED_SOURCE node. The editorial content above is authoritative; the live-data check will retry on the next page revalidation.
Indicators: Computing — check back later. The precompute pipeline is building this feed's indicator sample from the host corpus and will populate the count and representative addresses on an upcoming run.
Look up which threat feeds list a given IP — the indicator-anchored query that powers the threat card:
MATCH (ip:IPV4 {name: $ip})-[:LISTED_IN]->(f:FEED_SOURCE)
WHERE f.name = "FireHOL WebClient"
WITH f
MATCH (f)-[:BELONGS_TO]->(c:CATEGORY)
RETURN f.name AS feed, c.name AS categoryVerify the feed's graph-side identity directly:
MATCH (f:FEED_SOURCE {name: "FireHOL WebClient"})
OPTIONAL MATCH (f)-[:BELONGS_TO]->(c:CATEGORY)
RETURN f.id AS id, f.name AS name, c.name AS categoryOr query Whisper from your own LLM workflow via the Whisper MCP server.
Pivot from FireHOL WebClient into adjacent entities.