You are here: Home > Get Support > Spam, Hacking and Phishing

How to Find Abuse Contact Information


The Abuse Contact Finder

We have a tool that can help you find exactly who you need to contact to resolve your problem. Just enter the IP address in the box below and it will give you the contact email address for the responsible party.


Abuse Contact Information in the RIPE Database

At the RIPE NCC, we allocate blocks of IP addresses to Internet service providers (ISPs) and other organisations, but we have no involvement in how these addresses are used. We are not responsible for spamming or hacking, but we can help you find out who is.

All RIPE NCC allocated address space and direct end user assignments - represented in the RIPE Database by inet(6)num and aut-num objects - reference an organisation object.

More specific address space objects inherit this reference from the parent address space, unless differently specified.

The organisation object should reference an abuse handling ROLE object with an “abuse-c:” attribute.

The abuse contact is the email address you will find in the 'abuse-mailbox:' attribute referenced in an abuse ROLE object.

Please note that:

  • LIR organisation objects have 'org-type: LIR’
  • End User organisation objects have 'org-type: OTHER’


Reporting Abuse/Hacking/Spam

If you successfully found the abuse contact for the IP address, please send an email to this contact (not to the RIPE NCC) in which you report the problem providing as much detail as possible, including the IP address in question and the time the abuse took place.

Please contact us if the 'abuse-mailbox:' for a resource assigned to an LIR appears to be invalid or missing and you have problems in contacting the LIR organisation. 

If the 'abuse-mailbox:' for a resource assigned to an End User appears to be invalid or missing, please first contact the LIR listed in the 'sponsoring-org:' attribute found in the resource object. 


You can find more information in the abuse-c FAQs.