Skip to content

Threat feed

USOM Blocked IPs

Last fetched

General Blacklists · refreshed daily · last verified

USOM Blocked IPs is a General Blacklists threat-intelligence feed, refreshed daily, indexed by WhisperGraph. WhisperGraph currently records 5,159 indicators listed by it.

What is USOM Blocked IPs

USOM Blocked IPs is the IP-address component of the blocklist published by USOM, Turkey's National Cyber Incident Response Center, which maintains a government-operated blocklist of infrastructure associated with malware, phishing, and other cyber threats affecting Turkish internet users and networks. As a national-CERT-operated list, it carries a similar evidentiary standard to Europe's CERT.pl and CIRCL feeds also indexed here — entries pass through government analyst review before publication. It is indexed here as a national-CERT reference alongside its European counterparts.

Refresh cadence
daily

Category drift. The curated category for this feed is General Blacklists, while WhisperGraph currently files it under phishing.

Indicators currently listed

5,159 indicators across 3 node types.

HOSTNAME · 1

Related pages

Pivot from USOM Blocked IPs into the indicators it lists.

Queries

Resolves the feed's categories.


MATCH (f:FEED_SOURCE {name: $slug})
OPTIONAL MATCH (f)-[:BELONGS_TO]->(c:CATEGORY)
WITH f, collect(c.name) AS categories
RETURN f.name AS slug, f.id AS id, categories
Run yourself →

The indicator-kind rollup and sample listed above.


MATCH (f:FEED_SOURCE {name: $slug})<-[:LISTED_IN]-(x)
WITH labels(x)[0] AS kind, count(*) AS listed, collect(x.name)[0..5] AS sample
RETURN kind, listed, sample
ORDER BY listed DESC
Run yourself →

Or query Whisper from your own LLM workflow via the Whisper MCP server.