Spamhaus offers a Border Gateway Protocol (BGP) feed of three of its blocklists
These lists can deployed on routers by peering with Spamhaus BGP feed (BGPf) using the BGP protocol. This allows router equipment to block packets originating from IP addresses involved in specific types of malicious activity.
What are the three lists?
- The Botnet Controller List (BCL) is an advisory "drop all traffic" list consisting of single IPv4 addresses. The feed does not contain any subnets or CIDR prefixes longer than /32.
- The Don't Route Or Peer (DROP) lists are advisory "drop all traffic" lists, consisting of netblocks that have been "hijacked" or leased by professional spam or cybercrime operations.
- The Extended Don't Route Or Peer (EDROP) list is an extended version of the DROP list. It includes netblocks controlled by professional spamming operations and cyber criminals that are not directly allocated.