Audience
Security teams, analysts, researchers and organizations investigating internet threats worldwide.
About Whatoblock
Whatoblock is a web-based cyber threat intelligence and blocklist service for security analysts, incident responders, network defenders, hosting operators, and researchers. Its global honeypot sensor network records unsolicited connections and classifies source IP activity, including scanners, proxies, Tor exits, DDoS sources, and botnet command-and-control infrastructure. Users can search observed records, review IP and network context, filter activity by time, protocol, country, and autonomous system, and examine trends through analysis views and a public threat map. They can export findings and, depending on plan, access historical records, reports, alerts, and research downloads. Whatoblock also provides continuously updated industry-focused IP blocklist feeds in formats for supported firewalls, DNS controls, SIEMs, and other security tools. Free access is limited; paid plans expand data access or feed coverage.