Threat-feed index
Threat feeds on Whisper Internet Directory
133 curated indicator and reputation sources
This page indexes all 133 threat-intelligence and reputation feeds carried by the Whisper Internet Directory, drawn from the FEED_SOURCE label in WhisperGraph. Each feed has its own page with editorial description, source URL, refresh cadence, and a copy-able Cypher snippet for reproducing the indicator listing. The list is sourced from data/feeds.json — a hand-curated catalogue committed to the repository and kept in lock-step with the FEED_SOURCE nodes in the graph.
Ad/Tracking Blocklists
5 feeds in this category.
Brute Force
7 feeds in this category.
C2 Servers
14 feeds in this category.
- Botvrij Dst IPsRefreshes daily
- C2 Intel 30dRefreshes daily
- C2 Intel 90d DomainsRefreshes daily
- C2 Intel 90d IP:PortRefreshes daily
- Feodo TrackerRefreshes every 6 hours
- Maltrail: APT KimsukyRefreshes weekly
- Maltrail: APT LazarusRefreshes weekly
- Maltrail: AsyncRATRefreshes weekly
- Maltrail: Cobalt Strike (2)Refreshes weekly
- ThreatFox Domain and IP IOCsRefreshes hourly
- ThreatFox Domain IOCsRefreshes hourly
- ThreatFox IP IOCsRefreshes hourly
- ThreatFox URL IOCsRefreshes hourly
- ViriBack C2 TrackerRefreshes daily
Consumer Scams
1 feed in this category.
Crypto Scams
1 feed in this category.
General Blacklists
37 feeds in this category.
- AbuseIPDB Confidence 100, 30 DayRefreshes daily
- AlienVault OTX PulseRefreshes hourly
- Binary Defense BanlistRefreshes daily
- Blocklist.de AllRefreshes hourly
- Blocklist.de Strong IPsRefreshes hourly
- Blocklist.net.uaRefreshes daily
- CINS ScoreRefreshes every 6 hours
- CIRCL OSINT FeedRefreshes daily
- DataShield Critical IPv4 BlocklistRefreshes daily
- DNS RD AbuseRefreshes hourly
- DShield Recommended Block ListRefreshes daily
- DShield Top 20 AttackersRefreshes daily
- ET Compromised IPsRefreshes every 6 hours
- FireHOL Abusers 1dRefreshes hourly
- FireHOL Level 1Refreshes hourly
- FireHOL Level 2Refreshes hourly
- FireHOL Level 3Refreshes hourly
- FireHOL WebClientRefreshes hourly
- GreenSnow BlacklistRefreshes hourly
- InterServer RBLRefreshes every 6 hours
- IPsumRefreshes daily
- Maltrail: Mass ScannerRefreshes weekly
- Maltrail: TelekopyeRefreshes weekly
- RomainMarcoux Malicious IPs (Part AA)Refreshes daily
- RomainMarcoux Malicious IPs (Part AB)Refreshes daily
- SANS ISC Research ScannersRefreshes daily
- SANS ISC Top AttackersRefreshes daily
- Scam BlocklistRefreshes daily
- ShadowWhisperer IP Threat ListRefreshes daily
- Spamhaus ASN-DROPRefreshes every 6 hours
- Spamhaus DROPRefreshes every 6 hours
- SSL IP BlacklistRefreshes hourly
- Team Cymru Fullbogons IPv4Refreshes daily
- Team Cymru Fullbogons IPv6Refreshes daily
- ThreatView High-Confidence IPsRefreshes daily
- TweetFeed Monthly IOCsRefreshes daily
- USOM Blocked IPsRefreshes daily
Malicious Domains
7 feeds in this category.
Malware Distribution
20 feeds in this category.
- CIRCL OSINT File HashesRefreshes daily
- Hagezi Threat Intelligence Feeds, FullRefreshes daily
- InterServer SHA256 Malware SignaturesRefreshes every 6 hours
- InterServer Webshell MD5 SignaturesRefreshes every 6 hours
- LOLDrivers Vulnerable Driver SamplesRefreshes weekly
- MalShare Raw MD5 ListRefreshes daily
- Maltrail: EmotetRefreshes weekly
- MalwareBazaar FullRefreshes hourly
- MalwareBazaar MD5 HashesRefreshes hourly
- MalwareBazaar RecentRefreshes hourly
- MalwareBazaar SHA1 HashesRefreshes hourly
- R-fx Networks LMD Hash SignaturesRefreshes weekly
- ShadowWhisperer Malware DomainsRefreshes daily
- Stuartjash macOS Malware MD5Refreshes weekly
- Stuartjash macOS Malware SHA1Refreshes weekly
- Stuartjash macOS Malware SHA256Refreshes weekly
- ThreatView All MD5 HashesRefreshes daily
- TweetFeed Yearly MD5 HashesRefreshes daily
- TweetFeed Yearly SHA256 HashesRefreshes daily
- URLhaus RecentRefreshes hourly
OFAC Sanctions
4 feeds in this category.
Phishing
14 feeds in this category.
- Malware Filter: Phishing Domain IPsRefreshes hourly
- Malware Filter: Phishing DomainsRefreshes hourly
- MetaMask eth-phishing-detectRefreshes daily
- OpenPhish FeedRefreshes hourly
- PhishDestroy Destroy ListRefreshes daily
- Phishing ArmyRefreshes daily
- Phishing Database: DomainsRefreshes hourly
- Phishing Database: Domains, Resolved IPsRefreshes hourly
- Phishing Database: IPsRefreshes hourly
- Phishing Database: URLsRefreshes hourly
- PhishTank Verified OnlineRefreshes hourly
- PhishuntRefreshes hourly
- Polkadot{.js} Phishing ListRefreshes daily
- Sinking Yachts Phishing APIRefreshes real-time
Popularity/Trust
2 feeds in this category.
Proxies
3 feeds in this category.
Reputation
4 feeds in this category.
Spam
7 feeds in this category.
TOR Network
1 feed in this category.
VPN Providers
6 feeds in this category.