Threat feed
InterServer RBL
Last fetched
General Blacklists · refreshed every 6 hours · last verified
InterServer RBL is a General Blacklists threat-intelligence feed, refreshed every 6 hours, indexed by WhisperGraph. WhisperGraph currently records 3,630 indicators listed by it.
What is InterServer RBL
InterServer RBL is the public IP reputation feed published by hosting provider InterServer.net, derived from their network-wide abuse-detection and customer-complaint pipelines. The list focuses on IPs observed performing mass scanning, brute-force authentication attacks, and spam delivery against InterServer-hosted properties; entries are vetted by the abuse desk before publication, which keeps the false-positive rate low compared to fully-automated community feeds. Mail and web operators use it as a free deny-list overlay alongside Spamhaus and SORBS. It is indexed here as a citable provider-derived reference list for hosting-abuse research.
- Refresh cadence
- every 6 hours
Category drift. The curated category for this feed is General Blacklists, while WhisperGraph currently files it under blacklists.
Indicators currently listed
3,630 indicators across 3 node types.
HOSTNAME · 1
Related pages
Pivot from InterServer RBL into the indicators it lists.
Queries
Resolves the feed's categories.
MATCH (f:FEED_SOURCE {name: $slug})
OPTIONAL MATCH (f)-[:BELONGS_TO]->(c:CATEGORY)
WITH f, collect(c.name) AS categories
RETURN f.name AS slug, f.id AS id, categoriesThe indicator-kind rollup and sample listed above.
MATCH (f:FEED_SOURCE {name: $slug})<-[:LISTED_IN]-(x)
WITH labels(x)[0] AS kind, count(*) AS listed, collect(x.name)[0..5] AS sample
RETURN kind, listed, sample
ORDER BY listed DESCOr query Whisper from your own LLM workflow via the Whisper MCP server.