Skip to content
Home

Whatoblock.com

Provides firewall-ready blocklists of malicious IPs, including botnet C2, scanners, and proxies, via a live API and bulk data downloads.

whatoblock.comSecurity MonitoringFeb 2026Athens, Greece1-10

A threat intelligence platform that provides firewall-ready blocklists of malicious IPs, including botnet C2 servers, scanners, and proxies, to help security teams block threats. It sells to security teams of all sizes, from SOC analysts to enterprise security teams, as well as MSPs, MSSPs, developers, and researchers. The platform is delivered as a SaaS with a free tier, offering a live API, bulk data downloads, and integrations with security stacks, positioning itself as accessible without sales calls or large budgets.

Key features

  • Firewall-ready blocklists
  • Live API access
  • Bulk data downloads
  • Botnet C2 tracking
  • Scanner monitoring
  • Proxy and Tor detection
  • Geo and ASN enrichment
  • Malware sample downloads
  • Threat scoring
  • Category and confidence filters
  • No social media activity within the last 30 days
GTM channels
  • Blog
  • API
  • Docs
ICP
  • Security teams
  • DevOps sre teams
  • IT teams
VendorWhatoBlock