• Clean up of redundant zone files


    We are cleaning up some of the redundant zone files in the SURBL rsync server: surbl.rbldnsd - going away, use instead *.rbldns - going away when no traffic, use more

  • TTLs lowered to 1 hour


    We have lowered the TTLs on SURBL zone files to 1 hour. This includes, but does not include which already had a 10 minute TTL. This should cause new entries to take more

  • New whitelist sources added


    Added a new whitelist source: domains of publically-traded companies listed at dmoz and Google. Each yields lists of about 4300 or so of mostly the same domains which are now excluded from SURBLs. more

  • Updated SURBL records

    06/29/2004 records are now included in, so please use instead of be. be is now frozen and the content in it may go away more

  • Three new SURBL lists available


    Three new SURBL lists are available:,, The first two match advertised sites kindly provided by Outblaze and AbuseButler respectively. multi is a more

  • Removing subdomains from generic TLDs


    We are now properly removing any subdomains (third or greater level domains or host names) from generic TLDs. (For example, becomes This change may result in slightly more

  • Zone refresh times adjusted


    Zone file refresh times on and have been lowered from several hours to 20 minutes. TTLs for those zones remain at several hours. This change probably will affect few if more

  • sa.surbl has been removed

    04/27/2004 is gone. Please use instead, since it is the new name for the domains from Bill Stearns' more

  • Modification of rbldnsd zone files


    In order to prevent future confusion, we are changing the names of the rbldnsd zone files from .rbldns to .rbldnsd . If you are using rbldnsd, please update your rsync and cron configs to use the more

  • Zone files modified


    Zone files now only update when the underlying hosts have changed. more

<< < 1 2 3 [4]

SURBL Data Feed Request

SURBL Data Feeds offer higher performance for professional users through faster updates and resulting fresher data. Freshness matters since the threat behavior is often highly dynamic, so Data Feed users can expect higher detection rates and lower false negatives.

The main data set is available in different formats:

Rsync and DNS are typically used for mail filtering and RPZ for web filtering. High-volume systems and non-filter uses such as security research should use rsync.

For more information, please contact your SURBL reseller or see the references in Links.

Sign up for SURBL Data Feed Access.

  • Sign up for data feed access

    Direct data feed access offers better filtering performance with fresher data than is available on the public mirrors. Sign up for SURBL Data Feed Access.

  • Applications supporting SURBL

  • Learn about SURBL lists