Whatoblock

Whatoblock collects observations from its own honeypot sensor network and turns them into two products. Threat Intelligence lets analysts search by IP, ASN, port, service, country, protocol, file hash or botnet ID, move from an alert to the activity behind it, and export findings, with views for scanner reconnaissance, botnet and C2 infrastructure, and open data. Industry Blocklists turn the same observations into a stable feed a firewall or security stack can pull automatically, scoped to one, three or all industries. Public top-10 lists cover scanners, C2 servers, DDoS sources, proxy types and Tor exit nodes. Both products start free, and paid plans are priced on the site in euros, starting at 69€ a month billed yearly.