What abuse does

Abuse.net, legally Network Abuse Clearinghouse and operated by the Internet Emergency Coordination Committee (I.E.C.C.) from Trumansburg, New York, runs a public, non-commercial contact database covering over 200,000 domains that helps internet users, mail and system administrators, and software developers route spam and network abuse reports to the correct party. The service explicitly does not analyze, filter, or block mail; it is a directory, not a blacklist or feedback loop. Functionally, it fills the gap left by forged return addresses and opaque WHOIS data, centralizing abuse contacts in a single queryable asset.

The underlying technology is a deterministic, multi-protocol lookup stack: a web interface at lookup.phtml, a DNS-based service at contacts.abuse.net returning TXT records via pseudo-domain queries (with A records indicating result count and HINFO records indicating data source), a legacy WHOIS server at whois.abuse.net on TCP port 43 supporting batch domain lookups, and email-based lookups via [email protected] addresses. Database entries are aggregated from WHOIS registries (ARIN, RIPE, APNIC, LACNIC, AfrNIC), registrars, domain web pages, automated mail server tests, traceroute, upstream providers, and direct submissions from responsible domain managers. A MySQL backend supports automatic processing of most updates within an hour of receipt. The organization also hosts a community Spam Tools mailing list maintained via Sympa.

Commercially, abuse.net operates as a freemium/community utility. The web interface and APIs are free to the general internet community, and the operator refuses contributions from non-commercial users. The only disclosed revenue vector is implicit: commercial vendors that integrate abuse.net into a product or service must contact abuse.net to make separate arrangements, likely licensing fees or penalties. No paid tiers, no enterprise pricing, no headcount, no investor base, and no parent or subsidiary structure are disclosed. The organization positions itself as an internet community resource rather than a software business, with a CAN-SPAM-compliant policy against address harvesting and a published root certificate for programmatic trust.

Name

abuse

Legal name

Network Abuse Clearinghouse

Website

https://abuse.net

Company type

Private

Operating status

Operating

Short description

Abuse.net (Network Abuse Clearinghouse) operates a free, public contact database of 200,000+ domains, helping internet users, system administrators, and developers route spam and network abuse reports to the correct parties via web, DNS, and WHOIS lookups.

Ownership category

akta.pro rank

Product category

Abuse Contact Database / Network Abuse Reporting Services

NAICS

Web Search Portals and All Other Information Services (519290)

SIC

Telegraph & Other Message Communications (4822)

akta.pro primary industry

Spam, Fake Engagement & Content Abuse Prevention (HDADALAG)

akta.pro secondary industry

Web & Mobile Abuse (Scraping, Scalping, Inventory Hoarding) (HDADALAH)

Keywords

• Abuse contact database
• Network abuse clearinghouse
• Email abuse reporting
• WHOIS abuse lookup
• DNS abuse lookup

GTM type

B2C

Offering type

Services

Cost components

Technology or R&D, Infrastructure, Operations, Personnel

Revenue model

1. Free Service for Internet Community: Abuse.net is provided without charge to the general internet community. Services include web look-up page, DNS lookup, WHOIS server, and spam tools mailing list access at no cost.
2. Commercial Licensing: Commercial vendors that build abuse.net into a product or service must contact abuse.net to make arrangements and likely pay licensing fees or penalties.

Go-to-market motion2 records

Distribution channels3 records

Marketing channels1 record

Core offering

abuse.net operates the Network Abuse Clearinghouse, a centralized contact database of 200,000+ domain entries that routes network and email abuse reports to the correct administrative contacts. The database can be queried through a web form, DNS TXT records, WHOIS, or email, and is free for general internet users while requiring licensing from commercial vendors.

Product overview

Abuse.net operates a domain contact database lookup service that helps users report spam and other network abuse to the appropriate parties. The core offering consists of four interconnected lookup methods: a web-based contact lookup page, a DNS-based lookup service at contacts.abuse.net, a WHOIS server at whois.abuse.net, and email-based lookups via domain-format addresses. The service maintains contact information for over 200,000 domains, sourced from domain managers, WHOIS records, and automated discovery. Additionally, abuse.net hosts a community spam tools mailing list for tool developers and users.

Differentiator

Problem solved

Functional benefit

Products and services

• Network Abuse Clearinghouse (Abuse Contact Database) Centralized contact database containing 200,000+ domain entries used to route email and network abuse reports to the correct administrative contacts. Accessible free of charge by general internet users via web, DNS, WHOIS, and email interfaces; commercial vendors must pay a licensing fee.
• Web-based Abuse Contact Lookup Web form on abuse.net that accepts a domain or IP address and returns the appropriate abuse contact information. Designed for general internet users who want to file an abuse report against a particular network.
• DNS-based Abuse Contact Lookup DNS TXT record lookup mechanism enabling programmatic query of the abuse contact database. Used by software developers and mail/system administrators to integrate abuse-contact lookups into automated tools.
• WHOIS-based Abuse Contact Lookup WHOIS server interface that allows programmatic lookup of abuse contact information for domains and IP addresses. Targeted at mail/system administrators and software developers who need automated access.
• Email-based Abuse Contact Lookup Free email-based lookup service where users send a domain or IP address to abuse.net and receive the corresponding abuse contact information in response. Designed for general internet users who prefer email-based interaction.
• Commercial Vendor License for Abuse Contact Database Paid licensing tier that grants commercial vendors the right to use the abuse contact database for commercial purposes. Required for any commercial use of the clearinghouse's data.

Quantifiable outcome

• Over 200,000 domain contact entries available
• +1 more outcomes

Segments3 records

Ideal customer profiles2 records

Technology focussed Yes

API detail

Has API

Yes

API docs

API detail

Core technology

AI maturity

App detail

Feature4 records

Scale indicators1 record

Recent moves3 records

Direct peers

• AbuseIPDB: Community-driven IP-address abuse reporting database that mirrors abuse.net's model at the IP level rather than the domain level, serving the same reporting-and-routing use case for security teams and developers.
• SpamCop: Long-running abuse-report parsing and routing service (now under Cisco) that helps end users report spam to the correct administrators — the closest direct competitor in spirit, though SpamCop parses reports while abuse.net only routes them.
• PhishTank: Community-collaborative clearinghouse of verified phishing URLs, operated similarly to abuse.net as a volunteer-fed database that downstream tools and developers consume for free.
• MXToolbox: Network diagnostics and lookup platform for email/DNS administrators, providing comparable query-style tooling for the same sysadmin and developer persona that abuse.net serves.

Broad incumbents

• Spamhaus: Established DNS-based blocklist (DNSBL) operator in the anti-abuse space; overlaps with abuse.net's developer ecosystem but sits on the blocking/reputation side of the market rather than pure contact routing.
• Cloudflare Email Security: Major email-routing and security platform from a hyperscale infrastructure vendor; competes for the same abuse-handling workflow but bundles filtering, routing, and analytics rather than standalone contact lookup.
• Proofpoint: Enterprise email security incumbent offering abuse reporting, threat intelligence, and abuse-handling automation; broadly comparable audience (mail/system managers) but very different depth and business model.
• Mimecast: Email and collaboration security platform with abuse-reporting workflows aimed at enterprise IT teams; comparable end-customer segment to abuse.net's mail/system-manager users.

Emerging players

• SURBL: URI-based reputation data feed for spam detection, comparable as a community- and data-driven abuse intelligence feed consumed by mail-server operators and developers.

Others

• ICANN (WHOIS/RDAP program): Policy and technical authority over the WHOIS/RDAP ecosystem that abuse.net draws from as a primary data source; relevant as both a feeder and a potential substitute for abuse.net's contact-lookup function.

Market position

Strengths4 records

Weaknesses4 records

Competitive moat4 records

Key risks5 records

Key highlights5 records

Customer concentration

Revenue estimate

Valuation estimate

Number of profiles

Funding overview

Funding rounds

Investors

Funding detail is available on the Subscription and Enterprise plan.Contact sales →

M&A

Investments

M&A and investment is available on the Subscription and Enterprise plan.Contact sales →

Frequently asked questions about abuse