Please, please, please use whois to get abuse addresses

[bengan]

Could someone at spamcop/cisco actually do this? Rather sooner than later. RIPE-db has official abuse-adress per IP prefix that is correct. Other RIR have adopted that to. We have over 800 customers that need to get abuse email sent to them and not to us. It's actually easy to get the right address. For RIPE, APNIC and AFRINIC region just use -b in the whois lookup. For ARIN region just use normal whois and filter out OrgAbuseEmail. For LACNIC they have a resource record for abuse-c.

[petzl]

14 hours ago, bengan said:

Could someone at spamcop/cisco actually do this? Rather sooner than later. RIPE-db has official abuse-adress per IP prefix that is correct. Other RIR have adopted that to. We have over 800 customers that need to get abuse email sent to them and not to us. It's actually easy to get the right address. For RIPE, APNIC and AFRINIC region just use -b in the whois lookup. For ARIN region just use normal whois and filter out OrgAbuseEmail. For LACNIC they have a resource record for abuse-c.

Yes there is a big problem with SpamCop abuse address gathering, ARIN is one who allows SpamCop access others do not (so it's that or nothing), to stop "DoS attacking "ARIN" SpamCop reduces checks by caching entries). Another problem are legacy issues when years ago someone hard coded a actual abuse address which is no longer valid. Get yourself a WHOIS program for Windows I use http://www.nirsoft.net/utils/ipnetinfo.html look at page bottom for download link.