Threat-intelligence feed
SpamLast verified Page fetched
Blocklist.de Mail is a spam threat-intelligence feed tracked by WhisperGraph as a FEED_SOURCE node. The Whisper Internet Directory publishes this page so security analysts and LLM agents can link to it as a stable record for Blocklist.de Mail.
Blocklist.de Mail is the mail-server-targeting subset of Blocklist.de's fail2ban-derived reputation feed. It enumerates IP addresses observed performing SMTP brute force, dictionary harvesting, or relay abuse against participating mail operators. Mail teams deploy it as an additional pre-greylisting deny-list alongside Spamhaus DBL and PSBL; the per-category split is helpful when an operator wants to block mail abuse without affecting general web traffic. Source data is contributed by volunteer fail2ban operators across Europe, North America, and Asia. It is indexed here because it appears in many open-source mail-server hardening guides.
FEED_SOURCE node confirmed. WhisperGraph carries this feed under the same category (Spam) as the editorial entry above. The graph identifier blocklist-de-mail matches the live f.id property.
Live indicator listings: not yet available. WhisperGraph's LISTED_INedge is virtual and not enumerable from the feed side — there is no query-tractable way today to fetch the IPs and hostnames listed in this feed without first visiting every candidate indicator. Indicator-anchored queries work in the opposite direction (see the Cypher snippet below) and the directory's individual IP and host pages surface their feed memberships individually. Per-feed enumeration (an indicator count and sample of representative indicators) is on the roadmap.
Look up which threat feeds list a given IP — the indicator-anchored query that powers the threat card:
MATCH (ip:IPV4 {name: $ip})-[:LISTED_IN]->(f:FEED_SOURCE)
WHERE f.name = "Blocklist.de Mail"
WITH f
MATCH (f)-[:BELONGS_TO]->(c:CATEGORY)
RETURN f.name AS feed, c.name AS categoryVerify the feed's graph-side identity directly:
MATCH (f:FEED_SOURCE {name: "Blocklist.de Mail"})
OPTIONAL MATCH (f)-[:BELONGS_TO]->(c:CATEGORY)
RETURN f.id AS id, f.name AS name, c.name AS categoryOr query Whisper from your own LLM workflow via the Whisper MCP server.
Pivot from Blocklist.de Mail into adjacent entities.