Abuse Contact Database (DB) is a proxy database service for people who want to report network abuse directly to network owners, without getting lost in the RIR whois databases or get rate-limited by whois servers. The database service is an easy-to-handle mechanism that allows you to look up abuse contact email addresses from which abusive content was sent, by searching for the originating IP address.
We query the information stored in the RIR whois records for the range in question. Where possible, our Abuse Contact Database will return an address that is declared as abuse contact. As a failover, the technical contact in the RIR record may be returned.
We use only the biggest by RIRs (ARIN, RIPE, LACNIC, APNIC, AFRINIC) allocated ranges and the abuse contact addresses. If you believe there is a problem with the data or something is going wrong, please let us know, so we can update it in a timely fashion.
The Abuse Contact Database is DNS driven. This means that you can send requests to the Abuse Contact DB DNS server in the same way you would, with an RBL or any other DNS based list.
To obtain the abuse contact for IP 220.127.116.11 query abuse-contacts.abusix.zone with the reverse IP:
# host -t TXT 18.104.22.168.abuse-contacts.abusix.zone
The response contains the abuse contact in the TXT record:
22.214.171.124.abuse-contacts.abusix.zone descriptive text “firstname.lastname@example.org”
Multiple results are comma-separated in one TXT record:
126.96.36.199.abuse-contacts.abusix.zone descriptive text “email@example.com,firstname.lastname@example.org”
If you do not get any result, the range or IP does not exist or the responsible network owner didn’t declare an abuse contact yet.
The Abuse Contact Database also provides responses for IPv6 address queries.
To obtain the abuse contact for an IPv6 address query abuse-contacts.abusix.zone like this:
1. Reverse the IPv6 address, see this Wikipedia article.
2. Perform the DNS lookup for 2001:4800:4860::8844 like this:
# host -t TXT 188.8.131.52.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.6.8.4.0.0.8.4.184.108.40.206.abuse.contacts.abusix.zone
The response will provide you with the abuse contact in the TXT record:
220.127.116.11.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.6.8.4.0.0.8.4.18.104.22.168.abuse-contacts.abusix.zone descriptive text “email@example.com”
A python-based command-line tool called querycontacts is available. The tool provides a library that you may use in your own Python programs.
1. Installation: Download or install with…
# pip install querycontacts
2. Perform your queries:
# querycontacts 22.214.171.124
# querycontacts 2001:4800:4860::8844
The service is free!
If you use the information in the Abuse Contact DB for reporting, we only want you to place the following small reference into every single report message you send; indicating you used the Abuse Contact DB to find the recipient's abuse contact address:
The recipient address of this report was provided by the Abuse Contact DB by abusix.com.
Abusix provides a free proxy DB service which provides the abuse@ address for all global RIRs.
Abusix does not maintain the core DB content but provides a service built on top of the RIR databases.
If you wish to change or report a non-working abuse contact address.
please contact the appropriate RIR responsible for managing the underlying data.
Abusix is neither responsible nor liable for the content or accuracy of this message.
THIS DNS QUERY SERVICE IS PROVIDED “AS IS” AND “FREE” (AND MAY BE CANCELLED OR CHANGED BY THE PROVIDER AT ANY TIME), WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON INFRINGEMENT. IN NO EVENT SHALL THE PROVIDERS OF THIS SERVICE BE LIABLE FOR ANY COMPENSATION, CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SERVICE.