ABUSIX

There is a set of reasons for doing so:

• We figured out that about 80% of 2nd or 3rd level ranges contain abuse addresses located at freemail providers. The freemail providers block reports because they contain spam, which is quiet normal for a spam report. So the reports never arrive at the right place and we destroy our IP reputation by sending reports about “spam”.

• We also figured out that most of the Operators of 2nd or 3rd level ranges do not understand what to do with these reports. We received tons of questions and were asked to provide support while we feel that it is not up to us to provide support services for your customers.

• You can take appropriate measures , e.g. inform and/or lock your customers and by this help him to clean up his private infrastructure.
  We feel that it is very important that you see what is going on in your network, as every once in a while the customer is not responsible for the problem. Sometimes it is also a security problem in the infrastructure that can only be fixed by you. Eventually we can help to make your network safer than it already is.

• Last but not least it is a big challenge to get all the needed abuse contacts from the whois servers. All the RIRs restrict access and make it impossible to query every single address. Therefore we have to cache on a very high level base. As soon as RIRs decide to offer abuse contact API which is fast and can be used unrestricted, we will change this. RIPE started the AbuseFinder Tool project which looks pretty promising.