Understanding Spamhaus Data

In order to put Spamhaus data into proper use it is important to understand the terminology used, the datasets available and what they are intended to do.

• IP-based primary data sets ZEN are Malicious Network Ranges SBL, Compromised IPs XBL, Non-mail Emitting IPs PBL,but then it also includes Email Spam IPs CSS and Highly Malicious Networks DROP

• Domain data sets are Low Reputation Domains DBL and Zero Reputation Domains ZRD

• Other data sets for specific uses include Low Reputation Resources HBL and Bruteforce IPs AuthBL

The following is an introduction to these items

• Definitions: Zones and Datasets
• Datasets Enumeration and Description
  • Malicious Network Ranges (SBL)
  • Email Spam IPs (CSS)
  • Botnet C2 IPs (BCL)
  • Highly Malicious Networks (DROP)
  • Compromised IPs (XBL)
  • Non-mail Emitting IPs (PBL)
  • Bruteforce IPs (AuthBL)
  • Low Reputation Domains (DBL)
  • Zero Reputation Domains (ZRD)
  • Low Reputation Resources (HBL)
    • File (_file)
    • CryptoWallet (_cw)
    • Email(_email)
    • URL(_url)
• Available Zones