Spamhaus Technology and abuse.ch Logo
Solutions
Data
Email & Network
Cyber Threat Intelligence
Resources
About

Rsync
Protocol

Sync your chosen datasets directly to local servers with Rsync protocol, including the entire binary DNS blocklist data in addition to contextual metadata. Using this data, enhance email protection, investigations and enrich threat intelligence — all without relying on external infrastructure.

Quick local queries

Sync the datasets to your local servers and eliminate the latency of remote DNS lookups.

Incremental synchronization

Efficiently transfer your chosen datasets by only copying changes between the source and destination.

Define custom integration

Integrate Spamhaus data with your infrastructure using any methodology you wish.

Spamhaus’ Rsync

Gain access to Spamhaus datasets provided as a DNSBL or in JSON format via rsync, giving you full control to host them locally. Seamlessly integrate the data into your existing infrastructure to strengthen email protection, support investigations, and enrich your threat intelligence workflows.

By handling queries in-house, gain more time to analyze the data, and tailor insights to your organisation’s needs — all without any limits on query volume.

Why are there two different names for the data?

Our datasets have been supporting users for a very long time. With new users requesting our support, the dataset names are being updated for clearer understanding. We’re documenting two names, for now, to best support all users.

Datasets Included

Botnet C2 IPs

(Botnet Controller List - BCL)

Botnet command and controller (C2) servers. The status of these single IPv4 addresses is re-evaluated several times a day to identify active botnet controllers only. Utilize for protection or threat intelligence requirements.

Bruteforce IPs

(Authentication Blocklist - AuthBL)

Compromised IPs

(Exploits Blocklist - XBL)

Malware domains

(Malware Domains)

Email Spam IPs

(Combined Spam Sources - CSS)

Highly Malicious ASNs

(Don't Route Or Peer (ASN) - ASN DROP)

Highly Malicious Networks

(Don't Route Or Peer - DROP)

Low Reputation Domains

(Domain Blocklist - DBL)

Low Reputation Resources

(Hash Blocklist - HBL)

Malicious Domain Intelligence

Malicious network ranges

(Spamhaus Blocklist - SBL)

Non-mail emitting IPs

(Policy Blocklist - PBL)

transition

Use cases for Rsync

Querying Spamhaus’ data provides industry-leading protection for your email infrastructure — safeguard your wider network and users from spam, phishing and other email-borne threats.

Transition

For Email Protection

Gain fast, direct access to Spamhaus data via Rsync — the gold standard in email protection. Ideal for environments needing local mirroring, high-speed updates, or working behind firewalls.

With Rsync, email administrators can access flexible, effective protection for your email infrastructure and users, utilizing threat intelligence data, with industry-leading low false positive rates.

If your priority is blocking maximum spam rather than custom integration and flexibility, you may want to explore Spamhaus real-time DNS Blocklists.

Custom integration

Incorporate the data into your systems using the technology and workflow that best fit your needs.

Catch more threats

With fast, local access to updated blocklists, identify and block additional email threats during content filtering, providing an extra layer of protection.

Minimize security risks

Save on associated remediation costs and protect your reputation.

Getting started

  • How to access Rsync

    If you’re interested in Rsync or would like to learn more, fill out this form and a member of our team will be in contact soon.

  • System requirements

    To use this service, you'll need a server running a Linux or Unix-like operating system.

    For email protection: In addition, your internal IT team should have the infrastructure and expertise to understand, configure, and maintain both mail servers and DNS servers.

  • Technical documentation

    Full set up details for accessing Spamhaus’ datasets via Rsync are available in the customer portal once starting a free trial.

  • Pricing

    Pricing is based on number of users and data access requirements. Please contact our sales team for more details.

Ready to
get started?

If you’d like to query Spamhaus’ DNSBLs via Rsync. Fill out the form and a member of our team will be in touch.

Sign up

Frequently Asked Questions

  • Who can use Rsync?

    Rsync is ideal for larger networks that need to distribute data efficiently and maintain a local copy. It’s also suitable for networks where minimizing DNS latency is a concern.

  • How to use Spamhaus’ DNSBLs for filtering

    First, incoming email sent from a listed IP address can be dropped at SMTP connect, saving storage and processing costs. You have the choice to block, accept, or quarantine messages according to your company policy.

    When an email is blocked, the sender will immediately receive a notification, ensuring that emails do not lie unread in junk folders for weeks.

    After blocking unwanted emails during the SMTP transaction, the remaining traffic can then be filtered by content utilizing our low reputation domains, low reputation resources, and zero reputation domains datasets.

    This staged process is considered best practice:

    • Remove obvious spam sent from known botnets and spammers’ IP addresses and domains.
    • Detailed analysis to identify emails containing malware or links to new websites that are controlled by spammers and cybercriminals.

    Read “Where to apply blocklists for effective email filtering” for further details.

Trial More Data

Data Access

Border Gateway Protocol

Block the worst-of-the-worst at the network perimeter, using your existing BGP-capable appliances. Our data delivered via BGP Firewall is highly precise and low risk to block, targeting only verified malicious sources.

Learn More

Data Access

Intelligence API Developer License

Integrate context-rich metadata relating to IP and domain reputation to enhance existing data feeds, or consume as an independent data source. Gain additional intelligence to monitor, assess and remediate as required.

Learn More

Integration

Amazon SES Integration

Activate the pre-configured Spamhaus Email add-on to enhance the security posture of your email operations. Available to any Amazon SES customer.

Learn More