Blocked?See Live Threats Community

Resource
Center

A wealth of threat intelligence resources — including best practices, how-to guides, blogs, reports, and case studies on email, network, and CTI.

Featured News Article

Three Organisations, One Mission: Spamhaus-abuse.ch Partners with Modat

3 min read | September 09, 2026

With a shared commitment to the cybersecurity community, protecting the internet, and building a safer digital world - we're looking forward to working with you, Modat. Learn more about this new partnership.

Read Insight

Filter by tag

41 tags

Scroll to see more

API

abuse.ch

Abused

Binary Data

Border Gateway Protocol

Botnet C2

Brand Protection

Brand Reputation

CTI

Contextual data

DNS

DNS Blocklist

DNS Filtering

DNS Firewall

DNS Protection

Data Query Service

Data sharing

Domain Reputation

Edge Protection

Email Deliverability

Email Filtering

Email Protection

Email Compliance

Free Data & Tools

Historical Context

IP Reputation

Insight

Integrations

IoC

Malware

Malware Intelligence

Network Security

Passive DNS

Phishing

Ransomware

Response Policy Zones

Rsync

Spam

Spamtraps

Threat Hunting

Threat Intel

Filter by format

8 formats

Blog

News article

How to guide

Best practice

Case study

Report

Event

Research

News Article

Three Organisations, One Mission: Spamhaus-abuse.ch Partners with Modat

Posted on
September 09, 2026

Author
Spamhaus Technology Team

Read time
3 mins

Case Study

cyber_Folks protect customers and network with Spamhaus’ enhanced email protection

By integrating [Spamhaus’s real-time blocklists](https://www.spamhaus.com/data-access/real-time-dns-blocklists/) and enabling the sharing of basic email connection data, Polish-based hosting provider, cyber_Folks, has achieved an enhanced, targeted email protection for its customers. Read on to learn more.

Data sharing DNS Blocklist Data Query Service Binary data

Posted on
July 13, 2026

Author
Spamhaus Technology Team

Read time
4 mins

News Article

Introducing Deteqtive: Passive DNS, evolved into Passive DNS Intelligence

Introducing Deteqtive: a new passive DNS intelligence platform powered by Spamhaus data, designed to make investigations faster and more intuitive. Deteqtive is rolling out now for early access - find out what's new, why we built it, and how to get started.

Passive DNS CTI

Posted on
July 13, 2026

Author
Josip Dlaka

Read time
3 mins

Report

Botnet Threat Update January to June 2026

Between Jan–Jun 2026 botnet C&C servers observed decreased -30% to 14,952. Sliver overtook Cobalt Strike for the #1 spot (+58%). Meanwhile .cn botnet C&C domains surged +771% and India's PDR registrar saw a +901% spike in abused registrations - though REGRU bucked the trend with a -90% reduction. Read the latest report to learn more.

Posted on
July 10, 2026

Author
Spamhaus Project Team

Blog

Ways to use passive DNS intelligence: Security Professional

Find out how passive DNS intelligence is helping security professionals easily identify patterns of malicious behaviour on the internet and highlight additional areas of concern.

Passive DNS Historical context

Posted on
July 01, 2026

Author
Spamhaus Technology Team

Read time
2 mins

Blog

What is passive DNS? A beginner’s guide

Find out what passive DNS is, how data is collected and how it can benefit your organization.

Passive DNS CTI Historical context Brand Reputation

Posted on
July 01, 2026

Author
Milly Fawcett

Read time
4 mins

Blog

Ways to use passive DNS intelligence: Brand Protection Specialist

Read how passive DNS intelligence can help organizations uncover spoofed domains that can potentially damage their brand reputation.

Passive DNS Brand Protection Historical context

Posted on
July 01, 2026

Author
Spamhaus Technology Team

Read time
1 mins

Blog

Ways to use passive DNS intelligence: Penetration Testers

Passive DNS has the potential to assist various IT security roles, including Penetration Testers. Discover how this tool can help your investigations.

Passive DNS Historical context CTI

Posted on
July 01, 2026

Author
Milly Fawcett

Read time
1 mins

Research

SolarisLoader - A New Malware Loader

In May 2026, Spamhaus’ Cyber Threat Intelligence Unit identified a new malware family in the wild that we track as SolarisLoader distributed by various crack tools. Solaris has been observed delivering a variety of other infamous stealers and loaders, including StealC, XTinyloader and Amadey. Read the full report here.

Malware Botnet C2 CTI

Posted on
June 23, 2026

Author
Nikolaos Totosis

Read time
22 mins

News Article

A hunting platform, built with the people who hunt

abuse.ch and Spamhaus are developing a new CTI hunting platform designed to address the challenges of running YARA at scale. We’re looking for a small group of experienced YARA rule writers - people who already work in this space and understand the friction we’re aiming to remove. If that sounds like you, read on to learn more about the problems we’re solving and how you can get involved.

Threathunting CTI Malware Botnet C2

Posted on
June 22, 2026

Authors
Sarah Miller

Read time
3 mins

1 2 3...26

Meet Spamhaus at industry events

All Events

Underground Economy 2026

7th - 10th September 2026

Strasbourg, FR 🇫🇷

Flagship event from Team Cymru, for peers to gather and explore the latest trends, threats, and strategies in the cybersecurity landscape, particularly concerning the dark web and cybercrime ecosystems.

Learn More

VB2026

14th - 16th October 2026

Seville, ES 🇪🇸

The annual VB Conference provides a forum for IT security professionals from around the world to learn, debate, and share knowledge across a broad range of IT security topics.

Learn More

M3AAWG 68 General meeting

26th - 29th October 2026

Paris, FR 🇫🇷

M3AAWG meetings are for members to discuss the latest in messaging and online abuse with other professionals in a focused environment of working sessions and educational panels.

Learn More

APWG eCrime 2026

2nd - 6th November 2026

Lisboa, PT 🇵🇹

APWG eCrime 2026 explores the economic foundations, behavioral elements, technological exposures, policy aspects and other factors supporting the global cybercrime industry.

Learn More

JPAAWG 9th General Meeting

5th - 6th November 2026

Ōtemachi, JP 🇯🇵

JPAAWG meetings are for stakeholders in Japan's email and messaging industries to collaborate on improving security, reducing abuse, and enhancing best practices in electronic communications.

Learn More

More from us

Technical Documents

Access technical documents and supporting guidance to help you get the most from our solutions and data.

View the docs

Botnet Threat Map

Live botnet threats worldwide, showing the IP address locations of servers used to control malware-infected computers.

Learn more

FAQs

Find answers to frequently asked questions relating to our solutions and data.

Learn more

Need Help?
Get in touch

Spamhaus is committed to protecting and respecting your privacy. We’ll only use your personal information to respond to your enquiry, manage any accounts you may set-up, and to provide the products and services you request from us. From time to time, we would like to contact you about our products and services, as well as other security related content that may be of interest to you. If you consent to us contacting you for this purpose, please tick the box below.

You can unsubscribe from these communications at any time. For more information on how to unsubscribe, our privacy practices, and how we are committed to protecting and respecting your privacy, please review our Privacy Notice.

By clicking submit below, you consent to allow Spamhaus to store and process the personal information submitted above to provide you the content requested.

I agree to receive other communications from Spamhaus.

Privacy Notice Cookie Policy Terms and Conditions

ResourceCenter

Meet Spamhaus at industry events

Underground Economy 2026

VB2026

M3AAWG 68 General meeting

APWG eCrime 2026

JPAAWG 9th General Meeting

More from us

Need Help? Get in touch

Resource
Center

Need Help?
Get in touch