Spamhaus Technology and abuse.ch Logo
Solutions
Data
Email & Network
Cyber Threat Intelligence
Resources
About

Access
the Data

Our priority is making our data easy to access and integrate. No unnecessary tools or overcomplicated platforms—just reliable, high-quality data delivered how your needs demand.

Ways to access

For flexibility and to ensure your business challenges are met, access email, network and Cyber Threat Intelligence data your way, including trusted third-party integrations. We make our data available through a range of different methods and in various formats depending on the dataset; explore how you can access the data below.

Filter

solution
format

abuse.ch API

High-impact data, dedicated to malware indicators, from a globally diverse, knowledge-rich community. Access enterprise-grade intelligence, with reliability and scale, to enrich, hunt and track with clarity and confidence.


Available Formats

JSON
Learn More

abuse.ch Real-Time Feeds

Real-time stream of enriched indicators to enhance threat detection, triage, hunting, and enrichment workflows. Gain immediate access to fresh IOCs and dataset changes to proactively identify threats before they cause damage.


Available Formats

JSON
Learn More

Amazon SES Integration

Activate the pre-configured Spamhaus Email add-on to enhance the security posture of your email operations. Available to any Amazon SES customer.

Learn More

Border Gateway Protocol

Block the worst-of-the-worst at the network perimeter, using your existing BGP-capable appliances. Our data delivered via BGP Firewall is highly precise and low risk to block, targeting only verified malicious sources.


Available Formats

BGP
Learn More

DNS Blocklists via HTTPS

Access our DNS blocklist data using a simple API as a quick method to determine whether internet resources have good or bad reputation to support a variety of use cases. This can be supplemented with other, context-rich, datasets.


Available Formats

JSON
Learn More

DNS Response Policy Zones

Access our wide variety of DNS Response Policy Zone files to block or redirect access based on your appetite for risk. We provide the data, you set the terms, configurable to your business’ needs and company requirements/policies.


Available Formats

RPZ
Learn More

Free Data Query Service

Spamhaus Technology provides free access to query the real-time DNS Blocklists (DNSBLs) on behalf of The Spamhaus Project (subject to Terms of Use). This is to enable small-scale users to safely filter their email at no cost.


Available Formats

DNSBL
Learn More

Free DNS Firewall

With Spamhaus’ Free DNS Firewall service, access DNS Response Policy Zones (RPZ) to automatically block IPs that have been identified as being hijacked, belonging to bullet proof hosters, or are being leased by professional malicious organizations.


Available Formats

RPZ
Learn More

Halon Protect Integration

Ready-made integration, pre-configured in the Halon interface to provide instant email protection. Available to any Halon Protect customer.

Learn More

Intelligence API

Integrate context-rich metadata relating to IP and domain reputation to enhance existing data feeds, or consume as an independent data source. Gain additional intelligence to monitor, assess and remediate as required.


Available Formats

JSON
Learn More

Intelligence API Developer License

Integrate context-rich metadata relating to IP and domain reputation to enhance existing data feeds, or consume as an independent data source. Gain additional intelligence to monitor, assess and remediate as required.


Available Formats

JSON
Learn More

Maltego Integration

With Maltego, streamline complex analysis by utilizing the Spamhaus-abuse.ch Alliance’s expansive malware, IP and domain reputation intelligence. Quickly understand whether entities should be considered high risk, why, and whether it is still perpetuating malicious behavior to confidently define and prioritise next steps.

Learn More

MDaemon® integration

Enable the pre-configured settings, to gain an additional and immediate layer of security protection. Available to any MDaemon® Email Server customer.

Learn More

Messageware Integration

Ready to go integration, with simple configuration enriching the EPG product for additional Microsoft Exchange Server protection. Available to any Messageware (EPG) customer.

Learn More

Passive DNS API

A simple API supporting a variety of query types to discover historical, and up-to-the-moment, DNS infrastructure connections from Spamhaus’ Passive DNS database with up to one year of historical data.


Available Formats

JSON
Learn More

Passive DNS Real-Time Feed

A firehose of Passive DNS data, get updates as soon as they are generated with minimal or no delay. This provides immediate access for up-to-date information on DNS infrastructure connections.


Available Formats

JSON
Learn More

Real-time DNS Blocklists

Query real-time DNS blocklists, covering IPs, domains and hashes (including malware files, cryptowallets, email addresses and URLs) to protect your email infrastructure, wider network and users.


Available Formats

DNSBL
Learn More

Rspamd Plug-in

Purpose-built plug-in available on GitHub to classify email and block spam based on an analysis of headers and message body – compatible with several MTAs.

Learn More

Rsync

Incremental synchronization of binary and contextual datasets to local servers, including access to our entire binary DNS blocklist data. Efficiently transfer data by only copying changes between the source and destination.


Available Formats

DNSBL
JSON
TXT
Learn More

SpamAssassin Plug-in

Purpose-built plug-in available on GitHub to classify email and block spam based on an analysis of headers and message body – compatible with several MTAs.

Learn More

Spamhaus Consultancy

Data-driven consultancy to help networks prevent and resolve email-related challenges. By utilizing our unique internal databases against specific behavior patterns, we provide tailored, data-driven reports and actionable 1:1 advice.

Learn More

abuse.ch API

High-impact data, dedicated to malware indicators, from a globally diverse, knowledge-rich community. Access enterprise-grade intelligence, with reliability and scale, to enrich, hunt and track with clarity and confidence.


Available Formats

JSON
Learn More

abuse.ch Real-Time Feeds

Real-time stream of enriched indicators to enhance threat detection, triage, hunting, and enrichment workflows. Gain immediate access to fresh IOCs and dataset changes to proactively identify threats before they cause damage.


Available Formats

JSON
Learn More

Amazon SES Integration

Activate the pre-configured Spamhaus Email add-on to enhance the security posture of your email operations. Available to any Amazon SES customer.

Learn More

Border Gateway Protocol

Block the worst-of-the-worst at the network perimeter, using your existing BGP-capable appliances. Our data delivered via BGP Firewall is highly precise and low risk to block, targeting only verified malicious sources.


Available Formats

BGP
Learn More

DNS Blocklists via HTTPS

Access our DNS blocklist data using a simple API as a quick method to determine whether internet resources have good or bad reputation to support a variety of use cases. This can be supplemented with other, context-rich, datasets.


Available Formats

JSON
Learn More

DNS Response Policy Zones

Access our wide variety of DNS Response Policy Zone files to block or redirect access based on your appetite for risk. We provide the data, you set the terms, configurable to your business’ needs and company requirements/policies.


Available Formats

RPZ
Learn More

Free Data Query Service

Spamhaus Technology provides free access to query the real-time DNS Blocklists (DNSBLs) on behalf of The Spamhaus Project (subject to Terms of Use). This is to enable small-scale users to safely filter their email at no cost.


Available Formats

DNSBL
Learn More

Free DNS Firewall

With Spamhaus’ Free DNS Firewall service, access DNS Response Policy Zones (RPZ) to automatically block IPs that have been identified as being hijacked, belonging to bullet proof hosters, or are being leased by professional malicious organizations.


Available Formats

RPZ
Learn More

Halon Protect Integration

Ready-made integration, pre-configured in the Halon interface to provide instant email protection. Available to any Halon Protect customer.

Learn More

Intelligence API

Integrate context-rich metadata relating to IP and domain reputation to enhance existing data feeds, or consume as an independent data source. Gain additional intelligence to monitor, assess and remediate as required.


Available Formats

JSON
Learn More

Intelligence API Developer License

Integrate context-rich metadata relating to IP and domain reputation to enhance existing data feeds, or consume as an independent data source. Gain additional intelligence to monitor, assess and remediate as required.


Available Formats

JSON
Learn More

Maltego Integration

With Maltego, streamline complex analysis by utilizing the Spamhaus-abuse.ch Alliance’s expansive malware, IP and domain reputation intelligence. Quickly understand whether entities should be considered high risk, why, and whether it is still perpetuating malicious behavior to confidently define and prioritise next steps.

Learn More

MDaemon® integration

Enable the pre-configured settings, to gain an additional and immediate layer of security protection. Available to any MDaemon® Email Server customer.

Learn More

Messageware Integration

Ready to go integration, with simple configuration enriching the EPG product for additional Microsoft Exchange Server protection. Available to any Messageware (EPG) customer.

Learn More

Passive DNS API

A simple API supporting a variety of query types to discover historical, and up-to-the-moment, DNS infrastructure connections from Spamhaus’ Passive DNS database with up to one year of historical data.


Available Formats

JSON
Learn More

Passive DNS Real-Time Feed

A firehose of Passive DNS data, get updates as soon as they are generated with minimal or no delay. This provides immediate access for up-to-date information on DNS infrastructure connections.


Available Formats

JSON
Learn More

Real-time DNS Blocklists

Query real-time DNS blocklists, covering IPs, domains and hashes (including malware files, cryptowallets, email addresses and URLs) to protect your email infrastructure, wider network and users.


Available Formats

DNSBL
Learn More

Rspamd Plug-in

Purpose-built plug-in available on GitHub to classify email and block spam based on an analysis of headers and message body – compatible with several MTAs.

Learn More

Rsync

Incremental synchronization of binary and contextual datasets to local servers, including access to our entire binary DNS blocklist data. Efficiently transfer data by only copying changes between the source and destination.


Available Formats

DNSBL
JSON
TXT
Learn More

SpamAssassin Plug-in

Purpose-built plug-in available on GitHub to classify email and block spam based on an analysis of headers and message body – compatible with several MTAs.

Learn More

Spamhaus Consultancy

Data-driven consultancy to help networks prevent and resolve email-related challenges. By utilizing our unique internal databases against specific behavior patterns, we provide tailored, data-driven reports and actionable 1:1 advice.

Learn More
Go back a page
Go forward a page

Data Headlines

Users can access data from a wide range of sources, giving broad visibility to strengthen protection, hunt threats, and enrich their security operations. Here’s a quick data snapshot:

4,500,000,000

Mailboxes protected against email-borne threats.

5,000

Active botnet C2’s detected for network edge protection.

3,200,000

Domains and IPs with rich contextual metadata.

Featured Case Study

Context for anti data exfiltration pioneer, BlackFog, with Spamhaus Intelligence API

4 min read | June 05, 2023

BlackFog is pioneering technology to prevent data exfiltration and ransomware. Using Spamhaus’ Intelligence API, BlackFog validates its rich data, providing context to its users, reinforcing its anti data exfiltration (ADX) services.

Read Insight

Need Help?
Get in touch

0

Spamhaus is committed to protecting and respecting your privacy. We’ll only use your personal information to respond to your enquiry, manage any accounts you may set-up, and to provide the products and services you request from us. From time to time, we would like to contact you about our products and services, as well as other security related content that may be of interest to you. If you consent to us contacting you for this purpose, please tick the box below.

You can unsubscribe from these communications at any time. For more information on how to unsubscribe, our privacy practices, and how we are committed to protecting and respecting your privacy, please review our Privacy Policy.

By clicking submit below, you consent to allow Spamhaus to store and process the personal information submitted above to provide you the content requested.

I agree to receive other communications from Spamhaus.