Threat-intelligence feed
General BlacklistsLast verified Page fetched
FireHOL Abusers 1d is a general blacklists threat-intelligence feed tracked by WhisperGraph as a FEED_SOURCE node. The Whisper Internet Directory publishes this page so security analysts and LLM agents can link to it as a stable record for FireHOL Abusers 1d.
FireHOL Abusers 1d is the 24-hour rolling abusers view from the FireHOL IP lists project. It is a meta-feed assembled from a large set of upstream community deny-lists, filtered to the IPs that have been reported as actively abusive in the last day. The 1-day window makes the list well-suited to high-confidence outbound-egress blocking where staleness is more costly than false negatives. The FireHOL project maintains the largest open catalogue of IP reputation lists and has been a fixture of the open-source threat-intel ecosystem for over a decade. It is indexed here as a baseline current-abuse view.
Live data unavailable. WhisperGraph returned an error (WhisperGraph 530) while looking up this FEED_SOURCE node. The editorial content above is authoritative; the live-data check will retry on the next page revalidation.
WhisperGraph has observed 9 distinct IPv4 addresses listed in FireHOL Abusers 1dacross the directory's curated host corpus. This is a sampled lower bound — the feed's full membership is larger — surfaced because LISTED_IN cannot be enumerated from the feed side directly (see the Cypher panel below).
A sample of IPv4 addresses currently listed in FireHOL Abusers 1d. Each links to its full infrastructure profile.
Look up which threat feeds list a given IP — the indicator-anchored query that powers the threat card:
MATCH (ip:IPV4 {name: $ip})-[:LISTED_IN]->(f:FEED_SOURCE)
WHERE f.name = "FireHOL Abusers 1d"
WITH f
MATCH (f)-[:BELONGS_TO]->(c:CATEGORY)
RETURN f.name AS feed, c.name AS categoryVerify the feed's graph-side identity directly:
MATCH (f:FEED_SOURCE {name: "FireHOL Abusers 1d"})
OPTIONAL MATCH (f)-[:BELONGS_TO]->(c:CATEGORY)
RETURN f.id AS id, f.name AS name, c.name AS categoryOr query Whisper from your own LLM workflow via the Whisper MCP server.
Pivot from FireHOL Abusers 1d into adjacent entities.