Hi Markus There are a couple of standardized abuse report forms to report incidents or spam which can automaticly be processed by abuse desks.
Ask Google for ARF oder X-ARF Then there is the problem of finding the abuse contacts. I agree, whois reply parsing is absolutely ugly, especialy as you have to follow refferals in the case of ARIN and APNIC. RIPE is easy, they have an API you can query: https://apps.db.ripe.net/search/abuse-finder.html https://labs.ripe.net/ripe-database/abuse-handling-in-the-ripe-database Example API call in JSON: https://apps.db.ripe.net/whois/use-cases/abuse- finder.json?source=ripe&primary-key=157.161.1.2 (also works without ssl) Apparently Afrinic offers a similar API which I haven't found yet. If anyone knows of other such APIs on the other RIR, I would be delighted to know about them. And of course there is the abusix.org contacts database via DNS: $ host -t txt 0.0.161.157.abuse-contacts.abusix.org 0.0.161.157.abuse-contacts.abusix.org descriptive text "[email protected]" Mit freundlichen Grüssen Benoit Panizzon -- I m p r o W a r e A G - ______________________________________________________ Zurlindenstrasse 29 Tel +41 61 826 93 07 CH-4133 Pratteln Fax +41 61 826 93 02 Schweiz Web http://www.imp.ch ______________________________________________________ _______________________________________________ swinog mailing list [email protected] http://lists.swinog.ch/cgi-bin/mailman/listinfo/swinog
