Back to Rule

Rule History

SID: 906200020 • Source: sslbl/ja3-fingerprints

Versions (3)

Version DetailsCurrent

Rev: 1Jun 25, 2025, 11:40 AM

SSLBL: Malicious JA3 SSL-Client Fingerprint detected (Adware)

alert tls any any -> any any (msg:"SSLBL: Malicious JA3 SSL-Client Fingerprint detected (Adware)"; ja3_hash; content:"92579701f145605e9edc0b01a901c6d5"; reference:url, sslbl.abuse.ch/ja3-fingerprints/92579701f145605e9edc0b01a901c6d5/; sid:906200020; rev:1;)

Jun 25, 2025, 11:40 AM

Jun 25, 2025, 11:40 AM

Jul 17, 2025, 2:35 PM

Jul 17, 2025, 2:35 PM

ja3_fingerprints.rules