SSLBL: Malicious SSL certificate detected (Malware distribution)

SID: 903207698Rev: 10 views
Sourcesslbl/ssl-fp-blacklist
CreatedSeptember 15, 2025
UpdatedSeptember 15, 2025
alert tls $EXTERNAL_NET any -> $HOME_NET any (msg:"SSLBL: Malicious SSL certificate detected (Malware distribution)"; tls_cert_fingerprint; content:"dd:59:71:d2:9a:9b:83:73:51:e0:29:93:6a:ae:b0:f2:45:a1:e6:7e"; reference:url, sslbl.abuse.ch/ssl-certificates/sha1/dd5971d29a9b837351e029936aaeb0f245a1e67e/; sid:903207698; rev:1;)

Comments (0)

Please sign in to leave a comment.
Sign in

No comments yet. Be the first to comment!