Global Search

Search across all Whatoblock.com threat intelligence data. Use prefix-based queries like ip:1.2.3.4, port:443, country:US for precise results.

Use prefix:value syntax for targeted searches. Combine multiple filters with spaces: port:53 protocol:udp

IPv4 Address

Direct IP lookup

192.168.1.1

MD5 Hash

32-char hex string

d41d8cd9...

UBID

UUID botnet ID

550e8400...

Multi-filter: Combine prefixes with spaces: port:53 protocol:udp service:dns

Use prefixes to search specific fields directly for faster, more accurate results

Multi-prefix queries automatically filter to data sources that support all specified prefixes

Prefix	Description	Sources	Example
`ip:`	IPv4 address	Scanner Botnet Heartbeat	`ip:1.2.3.4`
`port:`	Port (1-65535)	Scanner Open Data	`port:443`
`md5:`	MD5 hash	Botnet Open Data	`md5:d41d8cd9...`
`country:`	Country code	Scanner Botnet Heartbeat	`country:US`
`org:`	Organization	Scanner Botnet Heartbeat	`org:Cloudflare`
`service:`	Service name	Scanner Open Data	`service:ssh`
`asn:`	AS Number	Scanner Botnet Heartbeat	`asn:AS13335`
`protocol:`	TCP or UDP	Scanner Open Data	`protocol:tcp`
`ubid:`	Botnet ID	Botnet	`ubid:550e8400...`
`target:`	Targeted country	Scanner Botnet	`target:US`