SSLBL - SSL Blacklist
A project that detects malicious SSL connections by identifying and blacklisting SSL certificates used by botnet C&C servers and identifying JA3 fingerprints to detect and block malware botnet C&C communication.
A project that detects malicious SSL connections by identifying and blacklisting SSL certificates used by botnet C&C servers and identifying JA3 fingerprints to detect and block malware botnet C&C communication.
Checked October 2026.
The SSL Blacklist (SSLBL) is a project of abuse.ch that detects malicious SSL connections by identifying and blacklisting SSL certificates used by botnet C&C servers. It also identifies JA3 fingerprints to detect and block malware botnet C&C communication on the TCP layer. The platform provides a list of malicious SSL certificates, JA3 fingerprints, and statistics on botnet C&C operations that leverage SSL to encrypt botnet C&C traffic.
The platform offers several features, including:
No core features are listed for this product yet, so check the vendor's documentation for the full feature list.
No integrations are listed for this product yet. Check the vendor's documentation, or ask the vendor which integrations and APIs it supports.
Common questions about SSLBL - SSL Blacklist: features, pricing and alternatives.
SSLBL - SSL Blacklist is a product in the Threat Intel Feeds category. It covers C2, SSL and Botnet.
SSLBL - SSL Blacklist is free. Download and setup instructions are at https://sslbl.abuse.ch/.
Alternatives to SSLBL - SSL Blacklist listed on CybersecTools:
Compare all SSLBL - SSL Blacklist alternatives at https://cybersectools.com/alternatives/sslbl-ssl-blacklist
SSLBL - SSL Blacklist is available as a cloud service. It is listed for startups, small businesses, mid-market companies and enterprises. It is free.
Side by side: features, pricing model and the company behind each one.
Domain reputation threat intelligence feeds for malicious domain detection
DNSBL of end-user IP ranges that should not send email directly to MX servers.
Public access to Indicators of Compromise (IoCs) and other data for readers of Security Scorecard's technical blog posts and reports.
TeamTNT is modifying its malicious shell scripts after they were made public by security researchers.
In-depth threat intelligence reports and services providing insights into real-world intrusions, malware analysis, and threat briefs.
Cloud service that automates threat blocking on firewalls, routers & switches
On our shortlist?
No shortlist covers this product's category yet. The closest is Best Threat Intelligence Platform Solutions for Business.
Get a summary of this page from your assistant.
Mandos MCP: ask about all 9,033 products.
Connect your AI
