Skip to content
Install MCP

Threat feed

Blocklist.de Mail

Last fetched

Spam · refreshed hourly · last verified

Blocklist.de Mail is a Spam threat-intelligence feed, refreshed hourly, indexed by WhisperGraph.

Live data for this page is temporarily unavailable.

The graph returned an error for this lookup. Refresh in a moment to retry — fresh data is fetched on the next visit.

What is Blocklist.de Mail

Blocklist.de Mail is the mail-server-targeting subset of Blocklist.de's fail2ban-derived reputation feed. It enumerates IP addresses observed performing SMTP brute force, dictionary harvesting, or relay abuse against participating mail operators. Mail teams deploy it as an additional pre-greylisting deny-list alongside Spamhaus DBL and PSBL; the per-category split is helpful when an operator wants to block mail abuse without affecting general web traffic. Source data is contributed by volunteer fail2ban operators across Europe, North America, and Asia. It is indexed here because it appears in many open-source mail-server hardening guides.

Source
https://www.blocklist.de/en/lists.html
Refresh cadence
hourly

Indicators currently listed

Related pages

Pivot from Blocklist.de Mail into the indicators it lists.

Queries

Resolves the feed's categories.


MATCH (f:FEED_SOURCE {name: $slug})
OPTIONAL MATCH (f)-[:BELONGS_TO]->(c:CATEGORY)
WITH f, collect(c.name) AS categories
RETURN f.name AS slug, f.id AS id, categories
Run yourself →

The indicator-kind rollup and sample listed above.


MATCH (f:FEED_SOURCE {name: $slug})<-[:LISTED_IN]-(x)
WITH labels(x)[0] AS kind, count(*) AS listed, collect(x.name)[0..5] AS sample
RETURN kind, listed, sample
ORDER BY listed DESC
Run yourself →

Or query Whisper from your own LLM workflow via the Whisper MCP server.