Mailboxes protected against email-borne threats.
Access
the Data
Our priority is making our data easy to access and integrate. No unnecessary tools or overcomplicated platforms—just reliable, high-quality data delivered how your needs demand.
Ways to access
For flexibility and to ensure your business challenges are met, access email, network and Cyber Threat Intelligence data your way, including trusted third-party integrations. We make our data available through a range of different methods and in various formats depending on the dataset; explore how you can access the data below.
Filter
abuse.ch API
High-impact data, dedicated to malware indicators, from a globally diverse, knowledge-rich community. Access enterprise-grade intelligence, with reliability and scale, to enrich, hunt and track with clarity and confidence.
Available Formats
abuse.ch Real-Time Feeds
Real-time stream of enriched indicators to enhance threat detection, triage, hunting, and enrichment workflows. Gain immediate access to fresh IOCs and dataset changes to proactively identify threats before they cause damage.
Available Formats
Amazon SES Integration
Activate the pre-configured Spamhaus Email add-on to enhance the security posture of your email operations. Available to any Amazon SES customer.
Border Gateway Protocol
Block the worst-of-the-worst at the network perimeter, using your existing BGP-capable appliances. Our data delivered via BGP Firewall is highly precise and low risk to block, targeting only verified malicious sources.
Available Formats
DNS Blocklists via HTTPS
Access our DNS blocklist data using a simple API as a quick method to determine whether internet resources have good or bad reputation to support a variety of use cases. This can be supplemented with other, context-rich, datasets.
Available Formats
DNS Response Policy Zones
Access our wide variety of DNS Response Policy Zone files to block or redirect access based on your appetite for risk. We provide the data, you set the terms, configurable to your business’ needs and company requirements/policies.
Available Formats
Free Data Query Service
Spamhaus Technology provides free access to query the real-time DNS Blocklists (DNSBLs) on behalf of The Spamhaus Project (subject to Terms of Use). This is to enable small-scale users to safely filter their email at no cost.
Available Formats
Free DNS Firewall
With Spamhaus’ Free DNS Firewall service, access DNS Response Policy Zones (RPZ) to automatically block IPs that have been identified as being hijacked, belonging to bullet proof hosters, or are being leased by professional malicious organizations.
Available Formats
Halon Protect Integration
Ready-made integration, pre-configured in the Halon interface to provide instant email protection. Available to any Halon Protect customer.
Intelligence API
Integrate context-rich metadata relating to IP and domain reputation to enhance existing data feeds, or consume as an independent data source. Gain additional intelligence to monitor, assess and remediate as required.
Available Formats
Intelligence API Developer License
Integrate context-rich metadata relating to IP and domain reputation to enhance existing data feeds, or consume as an independent data source. Gain additional intelligence to monitor, assess and remediate as required.
Available Formats
Maltego Integration
With Maltego, streamline complex analysis by utilizing the Spamhaus-abuse.ch Alliance’s expansive malware, IP and domain reputation intelligence. Quickly understand whether entities should be considered high risk, why, and whether it is still perpetuating malicious behavior to confidently define and prioritise next steps.
MDaemon® integration
Enable the pre-configured settings, to gain an additional and immediate layer of security protection. Available to any MDaemon® Email Server customer.
Messageware Integration
Ready to go integration, with simple configuration enriching the EPG product for additional Microsoft Exchange Server protection. Available to any Messageware (EPG) customer.
Passive DNS API
A simple API supporting a variety of query types to discover historical, and up-to-the-moment, DNS infrastructure connections from Spamhaus’ Passive DNS database with up to one year of historical data.
Available Formats
Passive DNS Real-Time Feed
A firehose of Passive DNS data, get updates as soon as they are generated with minimal or no delay. This provides immediate access for up-to-date information on DNS infrastructure connections.
Available Formats
Real-time DNS Blocklists
Query real-time DNS blocklists, covering IPs, domains and hashes (including malware files, cryptowallets, email addresses and URLs) to protect your email infrastructure, wider network and users.
Available Formats
Rspamd Plug-in
Purpose-built plug-in available on GitHub to classify email and block spam based on an analysis of headers and message body – compatible with several MTAs.
Rsync
Incremental synchronization of binary and contextual datasets to local servers, including access to our entire binary DNS blocklist data. Efficiently transfer data by only copying changes between the source and destination.
Available Formats
SpamAssassin Plug-in
Purpose-built plug-in available on GitHub to classify email and block spam based on an analysis of headers and message body – compatible with several MTAs.
Spamhaus Consultancy
Data-driven consultancy to help networks prevent and resolve email-related challenges. By utilizing our unique internal databases against specific behavior patterns, we provide tailored, data-driven reports and actionable 1:1 advice.
abuse.ch API
High-impact data, dedicated to malware indicators, from a globally diverse, knowledge-rich community. Access enterprise-grade intelligence, with reliability and scale, to enrich, hunt and track with clarity and confidence.
Available Formats
abuse.ch Real-Time Feeds
Real-time stream of enriched indicators to enhance threat detection, triage, hunting, and enrichment workflows. Gain immediate access to fresh IOCs and dataset changes to proactively identify threats before they cause damage.
Available Formats
Amazon SES Integration
Activate the pre-configured Spamhaus Email add-on to enhance the security posture of your email operations. Available to any Amazon SES customer.
Border Gateway Protocol
Block the worst-of-the-worst at the network perimeter, using your existing BGP-capable appliances. Our data delivered via BGP Firewall is highly precise and low risk to block, targeting only verified malicious sources.
Available Formats
DNS Blocklists via HTTPS
Access our DNS blocklist data using a simple API as a quick method to determine whether internet resources have good or bad reputation to support a variety of use cases. This can be supplemented with other, context-rich, datasets.
Available Formats
DNS Response Policy Zones
Access our wide variety of DNS Response Policy Zone files to block or redirect access based on your appetite for risk. We provide the data, you set the terms, configurable to your business’ needs and company requirements/policies.
Available Formats
Free Data Query Service
Spamhaus Technology provides free access to query the real-time DNS Blocklists (DNSBLs) on behalf of The Spamhaus Project (subject to Terms of Use). This is to enable small-scale users to safely filter their email at no cost.
Available Formats
Free DNS Firewall
With Spamhaus’ Free DNS Firewall service, access DNS Response Policy Zones (RPZ) to automatically block IPs that have been identified as being hijacked, belonging to bullet proof hosters, or are being leased by professional malicious organizations.
Available Formats
Halon Protect Integration
Ready-made integration, pre-configured in the Halon interface to provide instant email protection. Available to any Halon Protect customer.
Intelligence API
Integrate context-rich metadata relating to IP and domain reputation to enhance existing data feeds, or consume as an independent data source. Gain additional intelligence to monitor, assess and remediate as required.
Available Formats
Intelligence API Developer License
Integrate context-rich metadata relating to IP and domain reputation to enhance existing data feeds, or consume as an independent data source. Gain additional intelligence to monitor, assess and remediate as required.
Available Formats
Maltego Integration
With Maltego, streamline complex analysis by utilizing the Spamhaus-abuse.ch Alliance’s expansive malware, IP and domain reputation intelligence. Quickly understand whether entities should be considered high risk, why, and whether it is still perpetuating malicious behavior to confidently define and prioritise next steps.
MDaemon® integration
Enable the pre-configured settings, to gain an additional and immediate layer of security protection. Available to any MDaemon® Email Server customer.
Messageware Integration
Ready to go integration, with simple configuration enriching the EPG product for additional Microsoft Exchange Server protection. Available to any Messageware (EPG) customer.
Passive DNS API
A simple API supporting a variety of query types to discover historical, and up-to-the-moment, DNS infrastructure connections from Spamhaus’ Passive DNS database with up to one year of historical data.
Available Formats
Passive DNS Real-Time Feed
A firehose of Passive DNS data, get updates as soon as they are generated with minimal or no delay. This provides immediate access for up-to-date information on DNS infrastructure connections.
Available Formats
Real-time DNS Blocklists
Query real-time DNS blocklists, covering IPs, domains and hashes (including malware files, cryptowallets, email addresses and URLs) to protect your email infrastructure, wider network and users.
Available Formats
Rspamd Plug-in
Purpose-built plug-in available on GitHub to classify email and block spam based on an analysis of headers and message body – compatible with several MTAs.
Rsync
Incremental synchronization of binary and contextual datasets to local servers, including access to our entire binary DNS blocklist data. Efficiently transfer data by only copying changes between the source and destination.
Available Formats
SpamAssassin Plug-in
Purpose-built plug-in available on GitHub to classify email and block spam based on an analysis of headers and message body – compatible with several MTAs.
Spamhaus Consultancy
Data-driven consultancy to help networks prevent and resolve email-related challenges. By utilizing our unique internal databases against specific behavior patterns, we provide tailored, data-driven reports and actionable 1:1 advice.
Data Headlines
Users can access data from a wide range of sources, giving broad visibility to strengthen protection, hunt threats, and enrich their security operations. Here’s a quick data snapshot:
4,500,000,000
5,000
Active botnet C2’s detected for network edge protection.
3,200,000
Domains and IPs with rich contextual metadata.
Featured Case Study
Context for anti data exfiltration pioneer, BlackFog, with Spamhaus Intelligence API
4 min read | June 05, 2023
BlackFog is pioneering technology to prevent data exfiltration and ransomware. Using Spamhaus’ Intelligence API, BlackFog validates its rich data, providing context to its users, reinforcing its anti data exfiltration (ADX) services.
Need Help?
Get in touch
Spamhaus is committed to protecting and respecting your privacy. We’ll only use your personal information to respond to your enquiry, manage any accounts you may set-up, and to provide the products and services you request from us. From time to time, we would like to contact you about our products and services, as well as other security related content that may be of interest to you. If you consent to us contacting you for this purpose, please tick the box below.
You can unsubscribe from these communications at any time. For more information on how to unsubscribe, our privacy practices, and how we are committed to protecting and respecting your privacy, please review our Privacy Policy.
By clicking submit below, you consent to allow Spamhaus to store and process the personal information submitted above to provide you the content requested.
I agree to receive other communications from Spamhaus.