Spamhaus Technology and abuse.ch Logo
Solutions
Data
Email & Network
Cyber Threat Intelligence
Resources
About

Rsync
Protocol

Sync Spamhaus’ complete binary DNS blocklist data directly to local servers with Rsync protocol. Using the data, block more than 99% of spam with industry leading low false positive rates — all without relying on external infrastructure.

Quick local queries

Sync the entire Spamhaus DNSBL data to your local servers and eliminate the latency of remote DNS lookups.

Incremental synchronization

Efficiently transfer data by only copying changes between the source and destination.

Define custom integration

Integrate Spamhaus DNSBL data with your email infrastructure using any methodology you wish.

Spamhaus’ Rsync

Gain flexible access to Spamhaus’ data via Rsync, giving you full control to host them locally. Integrate the DNSBLs with your systems to immediately protect against the vast bulk of spam and other email-borne threats at the SMTP gateway.

By handling queries in-house, gain more time to analyse the data and tailor filtering to suit your business needs—all without restrictions on query volume.

Why are there two different names for the data?

Our datasets have been supporting users for a very long time. With new users requesting our support, the dataset names are being updated for clearer understanding. We’re documenting two names, for now, to best support all users.

Datasets Included

Botnet C2 IPs

(Botnet Controller List - BCL)

Botnet command and controller (C2) servers. The status of these single IPv4 addresses is re-evaluated several times a day to identify active botnet controllers only. Utilize for protection or threat intelligence requirements.

Bruteforce IPs

(Authentication Blocklist - AuthBL)

Compromised IPs

(Exploits Blocklist - XBL)

Malware domains

(Malware Domains)

Email Spam IPs

(Combined Spam Sources - CSS)

Highly Malicious ASNs

(Don't Route Or Peer (ASN) - ASN DROP)

Highly Malicious Networks

(Don't Route Or Peer - DROP)

Low Reputation Domains

(Domain Blocklist - DBL)

Low Reputation Resources

(Hash Blocklist - HBL)

Malicious network ranges

(Spamhaus Blocklist - SBL)

Non-mail emitting IPs

(Policy Blocklist - PBL)

transition

Use cases for Rsync

Querying Spamhaus’ data provides industry-leading protection for your email infrastructure — safeguard your wider network and users from spam, phishing and other email-borne threats.

Transition

For Email Protection

Gain fast, direct access to Spamhaus data via Rsync — the gold standard in email protection. Ideal for environments needing local mirroring, high-speed updates, or working behind firewalls.

With Rsync, email administrators can access flexible, effective protection for your email infrastructure and users, utilizing threat intelligence data, with industry-leading low false positive rates.

If your priority is blocking maximum spam rather than custom integration and flexibility, you may want to explore Spamhaus real-time DNS Blocklists.

Custom integration

Incorporate the data into your systems using the technology and workflow that best fit your needs.

Catch more threats

With fast, local access to updated blocklists, identify and block additional email threats during content filtering, providing an extra layer of protection.

Minimize security risks

Save on associated remediation costs and protect your reputation.

Getting started

  • How to access Rsync

    If you’re interested in Rsync or would like to learn more, fill out this form and a member of our team will be in contact soon.

  • System requirements

    To use this service, you'll need a server running a Linux or Unix-like operating system.

    For email protection: In addition, your internal IT team should have the infrastructure and expertise to understand, configure, and maintain both mail servers and DNS servers.

  • Technical documentation

    Full set up details for accessing the DNS Blocklists via Rsync are available in the customer portal once starting a free trial.

  • Pricing

    Pricing is based on number of users and data access requirements. Please contact our sales team for more details.

Ready to
get started?

If you’d like to query Spamhaus’ DNSBLs via Rsync. Fill out the form and a member of our team will be in touch.

Sign up

Frequently Asked Questions

  • Who can use Rsync?

    Rsync is ideal for larger networks that need to distribute data efficiently and maintain a local copy. It’s also suitable for networks where minimizing DNS latency is a concern.

  • How to use Spamhaus’ DNSBLs for filtering

    First, incoming email sent from a listed IP address can be dropped at SMTP connect, saving storage and processing costs. You have the choice to block, accept, or quarantine messages according to your company policy.

    When an email is blocked, the sender will immediately receive a notification, ensuring that emails do not lie unread in junk folders for weeks.

    After blocking unwanted emails during the SMTP transaction, the remaining traffic can then be filtered by content utilizing our low reputation domains, low reputation resources, and zero reputation domains datasets.

    This staged process is considered best practice:

    • Remove obvious spam sent from known botnets and spammers’ IP addresses and domains.
    • Detailed analysis to identify emails containing malware or links to new websites that are controlled by spammers and cybercriminals.

    Read “Where to apply blocklists for effective email filtering” for further details.

Trial More Data

Data Access

Border Gateway Protocol

Block the worst-of-the-worst at the network perimeter, using your existing BGP-capable appliances. Our data delivered via BGP Firewall is highly precise and low risk to block, targeting only verified malicious sources.

Learn More

Data Access

Intelligence API Developer License

Integrate context-rich metadata relating to IP and domain reputation to enhance existing data feeds, or consume as an independent data source. Gain additional intelligence to monitor, assess and remediate as required.

Learn More

Integration

Amazon SES Integration

Activate the pre-configured Spamhaus Email add-on to enhance the security posture of your email operations. Available to any Amazon SES customer.

Learn More