About the Data
Reputation data for professional production environments, with real-time updates, for email filtering, network protection and investigations. Free and paid for accounts available.
Accessing commercial-grade reputation data
We provide access to our data, including blocklists, through Spamhaus Technology and its partners for distribution. They take our IP and domain reputation data and make it available at an enterprise-level for timely, accurate and reliable insight. Thousands of organizations use this data for email filtering, network protection, assessing the reputation of internet identifiers, and for investigation purposes.
Free and paid services are available - more information can be found below.
Who is Spamhaus Technology?
This independent company has delivered data at volume and velocity, coupled with technical support to the Spamhaus Project, for over two decades. Spamhaus Technology has a wealth of experience in rapidly delivering large amounts of reputation data via a robust infrastructure, providing users across the globe with protection, insights, and peace of mind.
Options to access commercial-grade reputation data
Free accounts: Free accounts are available via Spamhaus Technology, subject to terms of use, to ensure small-scale users can benefit from commercial-grade data feeds at no cost.
Annual subscriptions: Where data is used for commercial purposes, or for large scale usage, users can select an annual subscription-based service. Commercial customers benefit from technical support and access to an increased number of datasets, providing additional security and context.
What data can I access for network protection?
Email Filtering
The Data Query Service provides real-time access to IP and content-related DNS Blocklists. The blocklists can protect against spam, phishing emails, malware files, and ransomware.
Network Protection
DNS Firewall uses response policy zones (RPZs) at the DNS-level to provide automatic protection against users resolving to phishing websites or malware dropper sites, among others.
Network Edge Protection
Border Gateway Protocol (BGP) “communities” consisting of IPs associated with botnet command and controllers (C&Cs), or those listed on Do Not Route or Peer (DROP) datasets, can be used at the network edge via routers or firewalls. The datafeeds protect against potential data exfiltration, immediately dropping any connections to botnet C&Cs.
Signal and Intelligence
Spamhaus Intelligence API provides IP and domain reputation data, containing signal and intelligence relating to IPs and domains. This data can be used for threat detection and investigation, vetting, validation and more.
Passive DNS
Cache miss data provides valuable insight into current and historical connections across the internet, allowing users to easily pivot from IPs to domains, and visa versa, to investigate how specific internet identifiers are related. Invaluable data for threat hunting, penetration testers, security researchers, and brand protection.