Introduction

Abusix Ops is an abuse management platform designed for ISPs, Hosting Providers, and DNS Operations. It provides a comprehensive solution for handling abuse reports and automating workflows. Once Abusix Ops receives your different abuse formats (Email, XARF, Global Reporting), they are parsed into events. Some reports can generate a large number of events because Abusix Ops is designed to be as granular as possible. For example, brute force attacks on many different ports from the same machine can lead to multiple events as every port is an event on its own. Next, each event flows through Inbound Processing. In Inbound Processing it is crucial to set up customer resolution because Abusix Ops needs at least a customer ID for aggregating all those events into customers and cases. There are two core concepts for customer resolution:

1. Static resolution
2. API resolution

Static resolution is usually based on IP or domain which is then considered as the customer ID. When using API resolution, we query your system with event metadata (e.g., one or multiple of IP, domain, date, port, type, etc.) which then responds with a unique customer ID. We strongly recommend API resolution as it allows the system to track abuse even when IPs, domains, or ports change. By default, Abusix Ops uses the IP address as the customer ID. Once a customer ID is present, we can aggregate incoming events into customers and cases. Customers are available immediately at https://app.abusix.com/guardian/ops/customers. Cases, however, need at least one case group in Inbound Processing. Also, automation requires cases, as you can attach playbooks only to case groups. Hence, when cases are configured, the next step is to set up automation in playbooks where you can make API calls to your systems or send emails (soon) using templates. The Getting Started guide walks you through the main steps of setup:

1. Configure abuse report forwarding
2. Set up customer resolution
3. Configure inbound processing with case groups
4. Set up playbooks for automation

Below is an overview of Abusix Ops’ key features and data pipeline:

​

Getting Started

Ready to start using Abusix Ops? You can:

1. Access the platform: Go to Abusix Ops and log in with your existing Abusix account or create a new one.
2. Follow the setup guide: Jump to our Getting Started guide to configure your environment and begin managing abuse reports.
3. Configure inbound processing: Set up your Inbound Processing workflow to control how incoming abuse reports are processed, enriched, and assigned to customers.