Threat-intelligence feed
Brute ForceLast verified Page fetched
SSH Password Auth is a brute force threat-intelligence feed tracked by WhisperGraph as a FEED_SOURCE node. The Whisper Internet Directory publishes this page so security analysts and LLM agents can link to it as a stable record for SSH Password Auth.
SSH Password Auth is the DataPlane.org companion feed to SSH Client Attacks, narrowed to IPs observed completing the SSH handshake and attempting password-based authentication against honeypot SSH services. Password-auth is a stronger signal than connection-only because it requires the attacker's tooling to actually present credentials — so the feed has a higher attack-confidence than scanner-only lists. Operators deploy it as a pre-authentication deny-list and as a SIEM enrichment overlay for production SSH log analysis. It is indexed here because the DataPlane.org methodology is well-documented and reproducible, making it useful as an academic-research baseline.
FEED_SOURCE node not currently in WhisperGraph. The editorial entry for SSH Password Authis committed to the directory but the corresponding graph node is missing — typically a transient state during the threat-feed import pipeline's between-runs window. The page will reconcile on the next revalidation.
Indicators: Computing — check back later. The precompute pipeline is building this feed's indicator sample from the host corpus and will populate the count and representative addresses on an upcoming run.
Look up which threat feeds list a given IP — the indicator-anchored query that powers the threat card:
MATCH (ip:IPV4 {name: $ip})-[:LISTED_IN]->(f:FEED_SOURCE)
WHERE f.name = "SSH Password Auth"
WITH f
MATCH (f)-[:BELONGS_TO]->(c:CATEGORY)
RETURN f.name AS feed, c.name AS categoryVerify the feed's graph-side identity directly:
MATCH (f:FEED_SOURCE {name: "SSH Password Auth"})
OPTIONAL MATCH (f)-[:BELONGS_TO]->(c:CATEGORY)
RETURN f.id AS id, f.name AS name, c.name AS categoryOr query Whisper from your own LLM workflow via the Whisper MCP server.
Pivot from SSH Password Auth into adjacent entities.