abuse.ch

abuse.ch is an independent, community-driven cyber threat intelligence project that operates six public platforms for sharing and consuming data on malware and botnets. It addresses the need for security researchers, anti-virus vendors, threat intelligence providers, network operators and law enforcement to identify, track and mitigate malware and botnet-related threats using crowdsourced intelligence.

The platforms include a unified search tool for looking up IPv4 addresses, domains, URLs and file hashes across all abuse.ch platforms, a repository for newly observed malware samples, a dataset for tracking C2 servers, blocklists for malicious SSL certificates and JA3/JA3s fingerprints, a feed of malicious URLs used for malware distribution, a collection of indicators of compromise, and YARAify, a repository of YARA rules for identifying, classifying, sharing and scanning malware. A Community Hub lets contributors track their activity through profiles and leaderboards.

The platforms are aimed at IT security experts and practitioners, including researchers and analysts who contribute or consume threat intelligence. The platforms are provided free of charge.