Threat feed
USOM Blocked IPs
Last fetched
General Blacklists · refreshed daily · last verified
USOM Blocked IPs is a General Blacklists threat-intelligence feed, refreshed daily, indexed by WhisperGraph. WhisperGraph currently records 5,159 indicators listed by it.
What is USOM Blocked IPs
USOM Blocked IPs is the IP-address component of the blocklist published by USOM, Turkey's National Cyber Incident Response Center, which maintains a government-operated blocklist of infrastructure associated with malware, phishing, and other cyber threats affecting Turkish internet users and networks. As a national-CERT-operated list, it carries a similar evidentiary standard to Europe's CERT.pl and CIRCL feeds also indexed here — entries pass through government analyst review before publication. It is indexed here as a national-CERT reference alongside its European counterparts.
- Source
- https://www.usom.gov.tr/
- Refresh cadence
- daily
Category drift. The curated category for this feed is General Blacklists, while WhisperGraph currently files it under phishing.
Indicators currently listed
5,159 indicators across 3 node types.
HOSTNAME · 1
Related pages
Pivot from USOM Blocked IPs into the indicators it lists.
Queries
Resolves the feed's categories.
MATCH (f:FEED_SOURCE {name: $slug})
OPTIONAL MATCH (f)-[:BELONGS_TO]->(c:CATEGORY)
WITH f, collect(c.name) AS categories
RETURN f.name AS slug, f.id AS id, categoriesRun yourself →The indicator-kind rollup and sample listed above.
MATCH (f:FEED_SOURCE {name: $slug})<-[:LISTED_IN]-(x)
WITH labels(x)[0] AS kind, count(*) AS listed, collect(x.name)[0..5] AS sample
RETURN kind, listed, sample
ORDER BY listed DESCRun yourself →Or query Whisper from your own LLM workflow via the Whisper MCP server.