
Jun 3, 2025
1.7.0
ThreatQ versions >= 5.29.0
abuse.ch Intelligence
Overview
BECAUSE MALWARE SUCKS
abuse.ch provides community driven threat intelligence on cyber threats. It is the home of a couple of projects that help internet service providers and network operators protect their infrastructure from malware. IT-Security researchers, vendors and law enforcement agencies rely on data from abuse.ch to make the internet a safer place.
Feeds included:
- Feodo Tracker Botnet C2 IP Blocklist
- SSLBL SSL BlacklistURLhaus Database Dump
- URLhaus Response Policy Zones
- URLhaus Plain-Text URL List
- URLhaus Plain-Text URL List Recent
The Abuse.ch Feeds integration ingests Indicators and Indicator Attribute types into the ThreatQ Platform.