Popular topics: Postfix Message stream

Overview

Abuse Contact Database (DB)

The Abuse Contact Database (DB) is a database service for people who want to report network abuse directly to network owners, without getting lost in the RIR WHOIS databases or get rate-limited by WHOIS servers. 

The database service allows you to look up abuse contact email addresses for the IP address that you saw the abusive content or behaviour originate from.

Where do we get the addresses from?

We query the information stored in the RIR WHOIS records for the address range in question. Where possible, our Abuse Contact Database will return an address that is declared as abuse contact.  As a fail-over, the technical contact in the RIR record may be returned.  We use only the largest allocated ranges by the RIRs (ARIN, RIPE, APNIC and AFRINIC) and the abuse contact addresses.  If you believe there is a problem with the data or something is going wrong, please let us know, so we can update it in a timely fashion.

Warning

Please note that LACNIC is the only RIR that does not provide this data, so for LACNIC ranges, the abuse contact abuse@lacnic.net is returned for all queries as we are unable to provide more specific data due to this restriction.

How do I query the database?

The Abuse Contact Database is exposed via DNS.  This means that you can send requests to the Abuse Contact DB in the same way you would with a DNSBL or any other DNS based list.  

This allows for higher volume queries than would be possible with an HTTP API.

Examples

To obtain the abuse contact for IP 78.47.241.202, you reverse the octets of the IP address and append ".abuse-contacts.abusix.zone."

$ host -t TXT 202.241.47.78.abuse-contacts.abusix.zone.
202.241.47.78.abuse-contacts.abusix.zone descriptive text "abuse@hetzner.de"

The response contains the abuse contact in the TXT record.  Multiple results are comma-separated in one TXT record.  If you do not get any result, the range or IP does not exist or the responsible network owner doesn't declare an abuse contact yet.

IPv6 queries are also supported, but require the lookup to be in "Nibble" format, which is the format used for IPv6 PTR record lookups.   You can find a tool to convert an IPv6 address to Nibble format here: http://rdns6.com/nibble

To obtain the abuse contact for the IPv6 address 2a03:b0c0:1:d0::bea:a001:

$ host -t TXT 1.0.0.a.a.e.b.0.0.0.0.0.0.0.0.0.0.d.0.0.1.0.0.0.0.c.0.b.3.0.a.2.abuse-contacts.abusix.zone.
1.0.0.a.a.e.b.0.0.0.0.0.0.0.0.0.0.d.0.0.1.0.0.0.0.c.0.b.3.0.a.2.abuse-contacts.abusix.zone descriptive text "abuse@digitalocean.com"

Command-line Tool

A python-based command-line tool called "querycontacts" is available. The tool provides a library that you may use in your own Python programs.

You can install it via:

$ pip install querycontacts

You can use "querycontacts <ip address>" and it will do the necessary conversion of the IP address and the subsequent lookup and return the results.

How much does this service cost?

The service is free! 

If you use the information in the Abuse Contact DB for reporting, we only want you to place the following small reference into every single report message you send; indicating you used the Abuse Contact DB to find the recipients abuse contact address: 

The recipient address of this report was provided by the Abuse Contact DB by Abusix.

Abusix provides a free IP address to abuse@ address lookup service.  Abusix does not maintain the core database content but provides a service built on top of the RIR databases.
If you wish to change or report a non-working abuse contact address, please contact the appropriate RIR responsible for managing the underlying data.
If you have any further questions about using the Abusix Abuse Contact DB, please either contact us via email at support@abusix.ai or visit https://abusix.com/contactdb
Abusix is neither responsible nor liable for the content or accuracy of this message.

Legal Notice

THIS DNS QUERY SERVICE IS PROVIDED “AS IS” AND “FREE” (AND MAY BE CANCELLED OR CHANGED BY THE PROVIDER AT ANY TIME), WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON INFRINGEMENT. IN NO EVENT SHALL THE PROVIDERS OF THIS SERVICE BE LIABLE FOR ANY COMPENSATION, CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SERVICE.

Was this article helpful?

Can’t find what you’re looking for?

Our award-winning customer care team is here for you.

Contact Support