Blacklist wiki · Retired
abuse.ch Combined
abuse.ch is a Swiss non-profit research project that tracks malware, botnets, and other cyber threats. Their combined list aggregates all their threat intelligence feeds.
- Zone
- Additional
- Tier
- Author
At a glance
- Zone
- combined.abuse.ch
- Tier
- Additional. Smaller or specialist lists with a narrower reach. Lower impact on its own, but worth clearing; a scan reports a listing here as information.
- What it lists
- IP addresses associated with malware distribution, botnet command & control, and other cyber threats.
- Impact
- Medium: respected in the cybersecurity community. Being listed indicates serious security issues.
- How to check
- Nothing to check: the zone no longer answers queries.
- How to delist
- No need: a list that has shut down holds no listings.
- Auto-expiry
- Does not auto-expire. Full remediation and evidence required.
How to get delisted
Kept for reference: this list no longer operates.
- 01Check your IP at abuse.ch
- 02This listing indicates your IP is associated with malware/botnet activity
- 03Perform a thorough security audit of your systems
- 04Remove any malware, close command & control connections
- 05Contact abuse.ch with evidence of complete remediation