Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Average Ratings 0 Ratings

Total
ease
features
design
support

No User Reviews. Be the first to provide a review:

Write a Review

Description

IP Threat Intel offers instantaneous threat intelligence that aids security teams in minimizing alert fatigue and expediting triage processes within TIPs, SIEM, and SOAR platforms. It can be utilized as an API integrated into your existing systems or as a robust local database tailored for intensive on-premise operations. This feed delivers comprehensive data on IP addresses noted within the last month, detailing the specific ports that have been targeted by each address. With updates occurring every hour, it remains aligned with the evolving threat landscape. Each IP entry not only provides insights into the event volume from the past 30 days but also indicates the latest detection made by ELLIO's deception network. Additionally, it presents a complete list of all IP addresses identified today, with each entry featuring tags and comments that provide context regarding the targeted regions, volume of connections, and the most recent sighting by ELLIO's deception network. With updates every five minutes, this service guarantees that you have access to the latest information, which is crucial for effective investigation and incident response, helping to enhance your overall security posture.

Description

Whatoblock serves as a comprehensive web-based platform for cyber threat intelligence and blocklisting, tailored for security professionals, incident responders, network defenders, hosting providers, and researchers. Utilizing a worldwide network of honeypot sensors, it captures unsolicited connections and categorizes IP activity from sources such as scanners, proxies, Tor exit nodes, DDoS attackers, and botnet control servers. Users are empowered to search through recorded data, analyze IP and network contexts, filter results based on various criteria including time, protocol, country, and autonomous systems, and observe trends with analytical views alongside a public threat map. Additionally, findings can be exported, and users, depending on their subscription plan, may access historical data, detailed reports, alerts, and research materials. Whatoblock continuously refreshes its industry-targeted IP blocklist feeds, which are available in compatible formats for various firewalls, DNS controls, SIEMs, and other security applications. Although free access is limited, subscription-based plans offer enhanced data availability or broadened feed coverage, making the service increasingly valuable for cybersecurity efforts. As the threat landscape evolves, Whatoblock remains a crucial resource for those seeking to enhance their security posture.

API Access

Has API Yes 

API Access

Has API Yes 

Screenshots View All

Screenshots View All

Integrations

FortiGate NGFW No 
JSON Yes 
Logstash Yes 
OPNsense No 
PAN-OS No 
Sophos Firewall No 
Wazuh No 
Zeek No 
pfSense No 

Integrations

FortiGate NGFW Yes 
JSON No 
Logstash No 
OPNsense Yes 
PAN-OS Yes 
Sophos Firewall Yes 
Wazuh Yes 
Zeek Yes 
pfSense Yes 

Pricing Details

$1.495 per month
Free Trial No 
Free Version No 

Pricing Details

€0
Free CTI access includes 24-hour data, the first five pages of live records per product, and five IP lookups per day. The free blocklist plan includes a limited scanner sample feed in every supported format. CTI Unlimited is €69/month, billed yearly. Blocklists Essential is €89/month (€1,068/year), Business is €199/month (€2,388/year), and Complete is €259/month (€3,108/year). Feed coverage varies by plan. Prices include VAT.
Free Trial No 
Free Version Yes 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Deployment

Web-Based Yes 
On-Premises No 
iPhone App No 
iPad App No 
Android App No 
Windows No 
Mac No 
Linux No 
Chromebook No 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Customer Support

Business Hours No 
Live Rep (24/7) No 
Online Support Yes 

Types of Training

Training Docs Yes 
Webinars Yes 
Live Training (Online) Yes 
In Person No 

Types of Training

Training Docs Yes 
Webinars No 
Live Training (Online) No 
In Person No 

Vendor Details

Company Name

ELLIO

Country

Czech Republic

Website

ellio.tech/ellio-ip-threat-intel

Vendor Details

Company Name

Whatoblock

Founded

2025

Country

Greece

Website

whatoblock.com

Product Features

Alternatives

Alternatives

No Alternatives
Darkfeed Reviews

Darkfeed

Cybersixgill