abuse.ch SSL Blacklist Feed

The SSL IP Blacklist contains all hosts (IP addresses) that SSLBL has seen in the past 30 days and identified as being associated with a malicious SSL certificate.

Data Enrichment & Threat Intelligence · Abuse.ch SSL Blacklist Feed · Feed

Configuration parameters

  • credentials —
  • url — Services (required)
  • feed — Fetch indicators
  • feedReputation — Indicator Reputation
  • feedReliability — Source Reliability (required)
  • tlp_color — Traffic Light Protocol Color
  • feedExpirationPolicy —
  • feedExpirationInterval —
  • feedFetchInterval — Feed Fetch Interval
  • feedBypassExclusionList — Bypass exclusion list
  • polling_timeout — Request Timeout (required)
  • insecure — Trust any certificate (not secure)
  • proxy — Use system proxy settings
  • feedTags — Tags

Commands (1)

  • sslbl-get-indicators

    Gets the feed indicators.