Threat-intelligence feed
General BlacklistsLast verified Page fetched
Blocklist.de All is a general blacklists threat-intelligence feed tracked by WhisperGraph as a FEED_SOURCE node. The Whisper Internet Directory publishes this page so security analysts and LLM agents can link to it as a stable record for Blocklist.de All.
Blocklist.de All is the union view of every IP reported by participating fail2ban operators to the German Blocklist.de network. The combined feed covers attacks against SSH, mail, IMAP, FTP, web applications, and brute-force authentication endpoints; individual category feeds (Mail, SSH, etc.) are also published separately. Reports are aggregated from thousands of administrator-installed fail2ban sensors and exposed through a free public API, making this one of the larger volunteer-driven IP reputation feeds available without a commercial license. It is indexed here because it is a frequent citation in DDoS and credential-stuffing post-mortems.
Live data unavailable. WhisperGraph returned an error (WhisperGraph 530) while looking up this FEED_SOURCE node. The editorial content above is authoritative; the live-data check will retry on the next page revalidation.
Indicators: Computing — check back later. The precompute pipeline is building this feed's indicator sample from the host corpus and will populate the count and representative addresses on an upcoming run.
Look up which threat feeds list a given IP — the indicator-anchored query that powers the threat card:
MATCH (ip:IPV4 {name: $ip})-[:LISTED_IN]->(f:FEED_SOURCE)
WHERE f.name = "Blocklist.de All"
WITH f
MATCH (f)-[:BELONGS_TO]->(c:CATEGORY)
RETURN f.name AS feed, c.name AS categoryVerify the feed's graph-side identity directly:
MATCH (f:FEED_SOURCE {name: "Blocklist.de All"})
OPTIONAL MATCH (f)-[:BELONGS_TO]->(c:CATEGORY)
RETURN f.id AS id, f.name AS name, c.name AS categoryOr query Whisper from your own LLM workflow via the Whisper MCP server.
Pivot from Blocklist.de All into adjacent entities.