Jump to content
Sign in to follow this  
bengan

Please, please, please use whois to get abuse addresses

Recommended Posts

Could someone at spamcop/cisco actually do this? Rather sooner than later. RIPE-db has official abuse-adress per IP prefix that is correct. Other RIR have adopted that to. We have over 800 customers that need to get abuse email sent to them and not to us. It's actually easy to get the right address. For RIPE, APNIC and AFRINIC region just use -b in the whois lookup. For ARIN region just use normal whois and filter out OrgAbuseEmail. For LACNIC they have a resource record for abuse-c.

Share this post


Link to post
Share on other sites
14 hours ago, bengan said:

Could someone at spamcop/cisco actually do this? Rather sooner than later. RIPE-db has official abuse-adress per IP prefix that is correct. Other RIR have adopted that to. We have over 800 customers that need to get abuse email sent to them and not to us. It's actually easy to get the right address. For RIPE, APNIC and AFRINIC region just use -b in the whois lookup. For ARIN region just use normal whois and filter out OrgAbuseEmail. For LACNIC they have a resource record for abuse-c.

Yes there is a big problem with SpamCop abuse address gathering, ARIN is one who allows SpamCop access others do not (so it's that or nothing), to stop "DoS attacking "ARIN" SpamCop reduces checks by caching entries). Another problem are legacy issues when years ago someone hard coded a actual abuse address which is no longer valid. Get yourself a WHOIS program for Windows I use http://www.nirsoft.net/utils/ipnetinfo.html look at page bottom for download link.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this  

×