Please read these terms before using Whatoblock.com. They explain the rules for accessing the service and the conditions that apply to free and paid accounts.
Acceptance of terms
By accessing or using Whatoblock.com, you agree to these Terms of Service. If you use the service on behalf of an organization, you confirm that you have authority to accept these terms for that organization. If you do not agree to these terms, do not use the service.
Description of service
Whatoblock provides threat intelligence and network blocklists built from activity observed across its sensor network.
- Threat intelligence: Scanner Recon, Heartbeat, Botnet and C2, and OpenData help users search observations, examine source records, review related network context, and access downloads where offered.
- Industry blocklists: Free sample and paid feeds provide observed source IPs in formats intended for supported firewalls and security tools.
Available features, data windows, download formats, and plan limits are shown on the relevant product and pricing pages. Retired API documentation is kept only as a historical reference and does not represent a currently available API service.
User accounts
Account creation
You must provide accurate, current information when creating an account and keep that information up to date.
Account security
You are responsible for:
- Keeping your account credentials and recovery codes confidential
- Activity performed through your account
- Notifying us promptly if you suspect unauthorized access
- Using a strong password and available account security controls
We do our best, within our control, to protect accounts and keep the service secure for everyone. If we detect activity that appears suspicious, we may notify you automatically by email. We strongly recommend enabling either time-based two-factor authentication (TOTP) or a passkey, where available.
Suspension and termination
We may suspend or terminate access when reasonably necessary to address a violation of these terms, protect the service or other users, comply with law, or respond to abuse. Where appropriate, we may give notice and an opportunity to correct the issue.
Acceptable use
You must not use the service to:
- Break the law or help another person do so
- Gain unauthorized access to accounts, systems, or data
- Compromise, test, or evade the security of our service without permission
- Send malware, spam, or abusive content
- Disrupt the service or interfere with another user's access
- Scrape or extract data without permission, or bypass rate limits, subscription limits, or access controls
- Misrepresent your identity, affiliation, or intended use of the service
- Use threat intelligence, malware samples, or other research material to harm systems or people
- Redistribute restricted data or downloadable material without authorization and appropriate security controls
Intellectual property
Our rights
The service, its software, design, branding, and original content are owned by Whatoblock or its licensors and are protected by applicable intellectual property laws.
Limited use rights
Subject to these terms and any plan-specific conditions, we grant you a limited, non-exclusive, non-transferable, revocable right to access and use the service for your internal lawful security and business purposes. This right does not transfer ownership of the service, its data, or any related intellectual property to you.
Restrictions
Unless a product page, download, or separate agreement expressly permits it, you may not:
- Copy, modify, sell, sublicense, or redistribute the service or its content
- Reverse engineer or attempt to extract nonpublic source code
- Use Whatoblock names, logos, or branding without authorization
- Remove, obscure, or alter copyright, trademark, attribution, or other proprietary notices
- Build a competing product, database, feed, or service from the service or its content
- Use automated means to access or reproduce the service except where expressly authorized
User materials and feedback
You retain any rights you hold in materials you submit to the service. You grant us the limited rights needed to host, process, secure, and display those materials to provide and improve the service. If you send suggestions or feedback, you allow us to use them without restriction or compensation, provided we do not identify you as the source without your permission.
Third-party materials
Third-party names, marks, software, data, and content remain the property of their respective owners and may be subject to additional terms. No license to third-party intellectual property is granted except as necessary to use the service as offered.
Privacy and data protection
Our Privacy Policy explains how we collect, use, retain, and protect personal and technical information when you use the service.
Service availability
We work to keep the service available and secure, but we do not guarantee uninterrupted access. Access may be limited or unavailable because of maintenance, updates, technical failures, security incidents, third party service interruptions, or events outside our reasonable control.
Blocklists
Blocklists are data that you apply to your own systems. Whatoblock supplies the feed, and you decide whether, where, and how to use it.
Your settings and enforcement decisions
You are responsible for the settings you choose for each feed, including sources, industries, time frame, blocking level, address aggregation, integration, and output format, and for how your firewalls, security tools, and scripts use the feed. Those choices determine which addresses are blocked. Stronger blocking levels, longer time frames, and aggregation into address ranges block more addresses, which can include addresses that were not themselves observed.
Blocking can stop legitimate traffic, including traffic from customers, partners, payment and cloud providers, content delivery networks, monitoring services, shared or translated addresses, and your own systems. Before you enforce a feed, we recommend that you test it in a monitoring or logging mode, maintain allowlists for addresses you depend on, keep a way to disable the feed quickly, and review its effect regularly.
Implementation examples
Setup guides, firewall and tool configurations, commands, scripts, sample settings, screenshots, and videos that we publish are general examples for illustration only. They are not prepared for your case, environment, devices, software versions, or requirements, and they are not professional advice. They are not a statement, representation, or warranty that a configuration is suitable, complete, secure, or will produce a particular result. Vendor products and interfaces change, so check the vendor's current documentation, and review, adapt, and test any example before you use it in production.
Responsibility for blocking decisions
To the maximum extent permitted by applicable law, Whatoblock is not liable for any loss or damage arising from:
- Feed settings that you or anyone using your account selects, or a mismatch between those settings and your environment
- Your decision to block, filter, rate limit, or otherwise act on traffic using a feed, including blocked legitimate traffic, service interruption, lost revenue or business, lost data, and the cost of investigation or recovery
- Addresses that are included, omitted, outdated, or removed from a feed
- A feed that is delayed, outdated, or unavailable, or the way your systems behave when a feed cannot be retrieved
- Using, adapting, or relying on an implementation example
This section applies in addition to the Limitation of liability section. Nothing in it excludes or limits liability that cannot lawfully be excluded or limited.
Limitation of liability
To the maximum extent permitted by applicable law:
- The service is provided on an "as is" and "as available" basis without warranties that are not expressly stated in these terms
- We are not liable for indirect, incidental, special, or consequential loss arising from use of the service
- Our total liability arising from the service is limited to the amount you paid for the service during the period giving rise to the claim
- We are not responsible for third party services, content, or actions outside our control
Nothing in these terms excludes or limits liability that cannot lawfully be excluded or limited.
Indemnification
To the extent permitted by law, you agree to indemnify and hold Whatoblock harmless from claims, losses, and reasonable costs arising from your unlawful use of the service, your material breach of these terms, or your violation of another person's rights.
Subscriptions and service terms
Plans and access
CTI Free provides limited threat intelligence access. CTI Unlimited provides the paid threat intelligence access described on the pricing page. Blocklists are available as a Free sample, Essential for one selected industry, Business for up to three selected industries, Complete for every current and future industry, and Custom under a separate agreement. Essential and Business subscribers can switch their selected industries once per billing period. Adding an industry to an unused Business slot is not a switch.
Meaning and limits of unlimited access
“Unlimited” describes access to the included CTI features and data within their intended human and organizational use. It does not mean unlimited technical volume, automation, concurrency, storage, or redistribution. We may apply reasonable rate limits, quotas, fair-use controls, concurrency limits, or temporary throttling to protect the platform and its users from abuse, scraping, excessive automated requests, denial-of-service patterns, unauthorized reselling, account sharing, attempts to evade plan limits, or activity that creates an unreasonable operational or security risk. We may also restrict or suspend access where necessary to investigate abuse, comply with law, or protect the service. Rate limits are applied automatically. If your activity reaches a limit, further requests are temporarily refused, and access returns on its own within minutes as the limit resets. You do not need to contact us for this. These safeguards do not remove any rights expressly included in your plan or provided by applicable law.
Billing and renewal
Paid plans are billed through Stripe using the monthly or yearly billing period selected at checkout. The price, currency, billing period, taxes where applicable, and any immediate charge or credit are shown before you confirm a purchase or plan change. Subscriptions renew automatically at the end of each billing period until cancelled.
Cancellation
You may cancel a subscription from the billing page. Cancellation normally takes effect at the end of the current paid period, and paid access continues until that date. Once cancellation takes effect, we will not charge a later renewal unless you subscribe again.
Refunds and consumer rights
For the first purchase made on an account, you may request a refund within 14 calendar days of the original purchase date. Refunds, credits, cancellation rights, and statutory withdrawal rights are otherwise handled in accordance with applicable law and the details shown at checkout. Nothing in these terms limits any consumer right that cannot lawfully be excluded. Contact [email protected] if you need to exercise such a right.
Threat intelligence and blocklists
Sensor observations, classifications, and blocklists can contain errors, change over time, or omit relevant activity. They do not establish a source's intent and do not guarantee that a source is malicious. Treat them as one input to your security controls, test changes before enforcement, and maintain suitable allowlists and recovery procedures for your environment.
Service changes
We may update features, coverage, data sources, formats, and plan limits as the service develops. Material changes that affect a paid subscription will be communicated through the service, by email, or on the relevant product page where reasonably practicable.
Governing law
These terms are governed by the laws of Greece, without regard to conflict of law principles. Mandatory rights and protections under applicable consumer law continue to apply.
Severability
If any provision of these terms is found to be unenforceable, the remaining provisions remain in effect.
Changes to terms
We may update these terms as the service or legal requirements change. For material changes, we may provide notice by posting the revised terms, notifying registered users by email or through the service, and changing the last updated date. Continued use after the revised terms take effect means you accept them, subject to any rights that applicable law gives you.
Contact information
For questions about these terms, email [email protected] or use the contact form.
Security reports
We welcome responsible reports of suspected vulnerabilities and urgent security issues at [email protected]. Include the affected service, the steps needed to reproduce the issue, and its likely impact. Do not send passwords, backup codes, session cookies, API keys, or unnecessary personal data.
At our discretion, we may offer a cash reward for a responsibly reported and verified vulnerability that we classify as high severity. Rewards are not guaranteed, may depend on eligibility and the quality of the report, and may be subject to separate program rules. We do not promise a reward for reports that are duplicative, speculative, made in bad faith, or based on activity that violates these terms.
These Terms of Service apply from the last updated date shown above.