SSLBL: Malicious SSL certificate detected (Malware C&C)

Removed rule. This rule is known, but it is no longer present in its source. Showing the last known version.Removed: Oct 21, 2026, 6:24 PM

SID: 903210957Rev: 1EnabledDerived5 viewsHistory

Sourceabuse.ch/sslbl-blacklist

Filesslblacklist_tls_cert.rules

CreatedOctober 21, 2026

UpdatedOctober 21, 2026

alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Malware C&C)"; tls_cert_fingerprint; content:"ee:44:c0:aa:60:99:18:ca:30:69:1f:e0:f4:9b:87:94:5d:45:0b:cd"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/ee44c0aa609918ca30691fe0f49b87945d450bcd/; sid:903210957; rev:1;)

References

url	sslbl.abuse.ch/ssl-certificates/sha1/ee44c0aa609918ca30691fe0f49b87945d450bcd/

Comments (0)

Please sign in to leave a comment.

No comments yet. Be the first to comment!