Threat feed
Blocklist.net.ua
Last fetched
General Blacklists · refreshed daily · last verified
Blocklist.net.ua is a General Blacklists threat-intelligence feed, refreshed daily, indexed by WhisperGraph.
What is Blocklist.net.ua
Blocklist.net.ua is a Ukrainian community-maintained IP reputation feed aggregating reports of scanning, brute-force, and other automated abuse observed by participating Ukrainian and regional network operators. Its regional focus makes it a useful supplementary overlay for operators whose traffic and abuse patterns are concentrated in Eastern Europe, where global feeds dominated by North American and Western European sensors can under-report locally-sourced abuse. The project publishes its list in the same fail2ban-derived style as the longer-running Blocklist.de network it is philosophically similar to. It is indexed here as a regional community reference alongside its better-known Western European counterparts.
- Refresh cadence
- daily
Category drift. The curated category for this feed is General Blacklists, while WhisperGraph currently files it under blacklists.
Indicators currently listed
No indicator in WhisperGraph currently links to Blocklist.net.ua. That is not the same as the feed being empty — the graph indexes a subset of every feed’s published entries.
Related pages
Pivot from Blocklist.net.ua into the indicators it lists.
Queries
Resolves the feed's categories.
MATCH (f:FEED_SOURCE {name: $slug})
OPTIONAL MATCH (f)-[:BELONGS_TO]->(c:CATEGORY)
WITH f, collect(c.name) AS categories
RETURN f.name AS slug, f.id AS id, categoriesRun yourself →The indicator-kind rollup and sample listed above.
MATCH (f:FEED_SOURCE {name: $slug})<-[:LISTED_IN]-(x)
WITH labels(x)[0] AS kind, count(*) AS listed, collect(x.name)[0..5] AS sample
RETURN kind, listed, sample
ORDER BY listed DESCRun yourself →Or query Whisper from your own LLM workflow via the Whisper MCP server.