What is AbuseIO?

It is a toolkit to receive, process, correlate and notify endusers about abuse reports received by network operators, typically hosting and access providers. AbuseIO's purpose is to consolidate efforts by various companies and individuals to automate and improve the abuse handling process.

We already have support for the feeds from : ShadowServer, SpamCop, Netcraft, Google Safe Browsing, IP Echelon, C-SIRT, Project Honey Pot, Abuse-IX and many more! Our goal is to support any known feed that provides abuse information.

AbuseIO's main features:

Receive (through a postfix handler) abuse messages and automaticaly parse them into abuse cases
Combine abuse message that already have an open case to reduce the amount of noise
Classify each type of abuse and create actions on specific cases
Create localy defined customers and/or netblocks or easily integrate your own IPAM system to resolve IP addresses to customers
Set automatic (re)notifications per case or customer
Allow customers to reply, close or add notes to cases, keeping them organized
Link customers to a self help portal in case they need more clue
Works with IPv4 and IPv6 addresses

More details and documentation can be found on our Project Website.

Getting started

See INSTALL for details.

Getting support

You can find us on the FreeNODE IRC network in #abuseio

Note on Patches/Pull Requests

Fork the project.
Make your feature addition or bug fix.
Add tests for it. This is important so I don't break it in a future version unintentionally.
Send a pull request.

Code of Conduct

Please note that this project is released with a Contributor Code of Conduct. By participating in this project you agree to abide by its terms.

ejschaefer/AbuseIO