Spamhaus CBL is reborn… now interplanetary!
CBL is a project that has contributed greatly in securing the Internet for decades. Now reborn as the “Cosmic Blocklist,” it extends beyond Earth allowing the listing of IP addresses across multiple planetary networks in the solar system - learn more! ... Read More
Querying the free DNSBLs via Oracle? Move to Spamhaus Technology’s free Data Query Service
If you're using the free DNS Blocklists (DNSBLs) through the Public Mirrors while running on Oracle’s network, you'll need to make a few small adjustments to your email setup. These changes are simple to apply, but if you don’t take action, you risk having some - or even all - ... Read More
Botnet Threat Update July to December 2025
Botnet Command & Controller (C&C) activity increased 24% this period, with Remote Access Trojans (RATs) accounting for 42% of the Top 20 malware associated with botnets. Learn which Russia-based registrar saw a +9,608% surge in botnet C&C domains—and which major cloud providers are taking action. Read the full report. ... Read More
New Feature | Spamhaus Reputation Checker: Troubleshoot your listing
It’s not always immediately clear why your IP has been listed or how to fix it. To help, we’ve added a new “troubleshooting” step to the IP & Domain Reputation Checker, specifically for those whose IPs have been listed on the Combined Spam Sources (CSS) Blocklist - IPs associated with ... Read More
Traffic Distribution System (TDS) abuse – What’s hiding behind the veil?
Those who follow the DNS abuse landscape closely may have noticed a rise in activity and abuse reports related to TDS. The use of this infrastructure for malicious purposes is becoming increasingly common. In this blog, we look at how TDS are being exploited to facilitate abuse, why they present ... Read More
Domain Reputation Update April – September 2025
Over the last 6 months a total of 43.5 million new domains were registered — 75% of them gTLDs — with .top (+94%) and .xyz (+103%) among the top three. Domain listings surged by 48.3%, and one registry saw particularly huge increases - can you guess which one? Read the ... Read More
Query the legacy DNSBLs via Korea Telecom? Move to Spamhaus Technology’s free Data Query Service
If you're using the free legacy DNS Blocklists (DNSBLs) through the Public Mirrors while running on Korea Telecom’s infrastructure, you'll need to make a few small adjustments to your email setup. These changes are simple to apply, but if you don’t take action, you risk having some - or even ... Read More
Botnet Threat Update January to June 2025
Botnet activity increased by 26% this reporting period; the first increase we've observed for over 18 months. Five new malware families entered the Top 20, and disappointing increases for a number of global networks hosting the most active botnet command & controllers (C&Cs). Read the full report ... Read More
Spamhaus’ take on Cold Emailing…AKA spam
Cold emailing, as it’s practiced today, is spam — for inboxes, businesses, and the internet. It’s a thriving industry, but one raising concerns in the email community. In this article we define cold emailing from our perspective, share concerns about its misuse, particularly in B2B communication, and highlight the organizations ... Read More
Botnets disrupted worldwide…Operation Endgame is BACK!
Operation Endgame, “Season 2”, is officially announced as of Friday, May 23rd, 2025. International law enforcement agencies and their partners have once again joined forces to disrupt and dismantle botnet infrastructure and their operators. In this post, get details of the take-down itself and Spamhaus’ role in victim account remediation ... Read More

