
Jun 9, 2026
1.7.0
ThreatQ versions >= 5.29.0
abuse.ch Intelligence
Overview
BECAUSE MALWARE SUCKS
abuse.ch provides community driven threat intelligence on cyber threats. It is the home of a couple of projects that help internet service providers and network operators protect their infrastructure from malware. IT-Security researchers, vendors and law enforcement agencies rely on data from abuse.ch to make the internet a safer place.
Feeds included:
- Feodo Tracker Botnet C2 IP Blocklist
- SSLBL SSL Blacklist
- URLhaus Database Dump
- URLhaus Plain-Text URL List
- URLhaus Response Policy Zones
The Abuse.ch Feeds integration ingests Indicators and Indicator Attribute types into the ThreatQ Platform.