Whatoblock.com
Login Register

See Tomorrow's Threats.
Today.

Access the world's most comprehensive threat intelligence platform, powered by real-time botnet and scanner data.

Get 100 Free Tokens Explore Threat Map

Real-time threat intelligence at scale

THREAT LEVEL: --
--
Threat Signals
--
Scanners Tracked
--
Botnet C2s
--
Open Data

Global Threat Landscape

Real-time statistics from our worldwide threat monitoring network

Heartbeat

--
IP address insights
Unique IPs --
Top Country --

Scanners

--
Scan attempts
Unique IPs --
Top Protocol --

Botnet C2

--
Command & Control servers
Downloadable --
Top Country --

Open Data

--
Total records
Total Size --
Top Service --
IPs Detected --

Threat Level

--
Current global index
Low Medium High Critical

Global Threat Heatmap

Real-time geospatial visualization of detected threat activity

geospatial-threat-monitor-demo
● MAPPING
geomap@whatoblock:~$ render --threats --global --realtime --demo
BOTNET C2
Command servers
SCANNERS
Reconnaissance
Heartbeat
IP address insights
[MAP] Rendering global threat distribution...
geomap@whatoblock:~$ Zoom: Global | Markers: 6 active | Update: Real-time |

Activity Analytics

Time-series analysis and tabular view of threat patterns

activity-analytics-demo
analytics@whatoblock:~$ analyze --timeseries --data --recent --demo
TIME-SERIES CHART
Temporal pattern analysis
DATA TABLE
Recent activity records
[CHART] Rendering activity timeline...
[TABLE] Loading recent activity data...
Initializing data stream...
analytics@whatoblock:~$ Mode: SCANNERS | Last update: -- | Status: Ready |

Live Threat Intelligence

Real-time monitoring of global cyber threats and malicious activity

threat-intelligence-stream
● LIVE
user@whatoblock:~$ monitor --live --threats --global
BOTNET C2 SERVERS
Command & Control monitoring active
SCANNER ACTIVITY
Network reconnaissance tracking
HEARTBEAT
IP address insights monitoring
[INFO] Displaying recent threat activity...

Initializing threat intelligence feed...

system@monitor:~$ Auto-refresh: 5min | Last update: -- | Source: Global honeypots |

Advanced Threat Intelligence Features

Comprehensive cybersecurity tools for monitoring, analyzing, and defending against network threats in real-time

Botnet Tracking

Monitor command and control servers with detailed threat scoring, geographic visualization, and downloadable payload analysis.

  • Real-time updates
  • Threat scoring system
  • Payload analysis
Explore

Scanner Analysis

Detect and analyze scanning activity with protocol breakdowns, geographic distribution, and temporal patterns.

  • Protocol filtering
  • ASN/ISP tracking
  • Time-series analysis
Explore

Open Data

Access to extensive internet-wide survey data with insights into global exposure to common vulnerabilities.

  • Advanced filtering
  • File downloads
  • Protocol analysis
Explore

Heartbeat

Monitor IP address insights with real-time heartbeat detection, category analysis, and geographic tracking.

  • Real-time monitoring
  • Category analysis
  • Geographic tracking
Explore

Monitored Open Data Ports

Common TCP and UDP ports scanned in our Open Data collection

opendata-configuration
● CONFIGURED
ports@whatoblock:~$ show --tcp --udp --monitored
TCP PORTS
Transmission Control Protocol
UDP PORTS
User Datagram Protocol
[CONFIG] Loading port configuration...

TCP PORTS

21 (FTP) 22 (SSH) 23 (Telnet) 25 (SMTP) 53 (DNS) 80 (HTTP) 110 (POP3) 143 (IMAP) 443 (HTTPS) 445 (SMB) 465 (SMTPS) 587 (SMTP Submission) 993 (IMAPS) 995 (POP3S) 1433 (MSSQL) 3306 (MySQL) 3389 (RDP) 5432 (PostgreSQL) 8080 (HTTP Alt) 8443 (HTTPS Alt) + MANY MORE

UDP PORTS

17 (QOTD) 19 (Chargen) 53 (DNS) 123 (NTP) 137 (NetBIOS) 389 (LDAP) 520 (RIP v1) 623 (IPMI) 1900 (SSDP) 3283 (ARD) 3478 (STUN) 3702 (WSD) 5060 (SIP) 5351 (NAT-PMP/PCP) 5353 (mDNS) 10001 (Ubiquiti) 11211 (Memcached) + MANY MORE
ports@whatoblock:~$ TCP: 20 ports | UDP: 17 ports | Status: Active monitoring |

Frequently Asked Questions

help-system-faq
● INTERACTIVE
help@whatoblock:~$ faq --list --interactive
QUESTIONS
10 available
ANSWERS
Click to expand
[FAQ] Loading frequently asked questions...
Q1: How do you detect scans or botnet activity?
A1:

We use proprietary detection software deployed on a global network of servers to ensure high accuracy.

Q2: Do you scan the internet?
A2:

Yes, but only for our Open Data service. You can opt out by submitting a request via our contact form. Please allow up to 5 business days for the change to take effect.

Q3: Will the project be open sourced?
A3:

While we support open source, releasing our detection methods would risk exposing them to malicious actors.

Q4: Is the service free to use?
A4:

Our platform operates on a token-based system. New users receive 100 free tokens upon signup to explore our services. We reserve the right to disable accounts involved in suspicious or harmful activity.

Q5: Are new features planned?
A5:

Yes, we are continuously improving and expanding the platform, with the goal of becoming a leading provider of threat intelligence data.

Q6: Why is my IP listed if I didn't initiate any activity?
A6:

If your IP is listed, it means it triggered detection mechanisms. Our system logs activity based on observed behavior, not intent.

Q7: Do you accept sponsorships?
A7:

Yes, we welcome sponsorships to help support the infrastructure and resources required to maintain the service.

Q8: What if I find a bug or vulnerability?
A8:

Please report it to us. We take security seriously and appreciate all responsible disclosures.

Q9: Will there be an API?
A9:

Yes, we offer comprehensive APIs for all of our threat intelligence products and services.

Q10: Can I request data for a specific region or country?
A10:

Absolutely. Let us know what you need and we'll do our best to accommodate your request.

help@whatoblock:~$ Total: 10 questions | Format: Interactive | Status: Ready for queries |

Ready to Secure Your Network?

Sign up for an account to access advanced features and historical data analysis.

Create Account Login