Hi Markus
There are a couple of standardized abuse report forms to report incidents or spam which can automaticly be processed by abuse desks.
Ask Google for ARF oder X-ARF
Then there is the problem of finding the abuse contacts. I agree, whois reply parsing is absolutely ugly, especialy as you have to follow refferals in the case of ARIN and APNIC.
RIPE is easy, they have an API you can query:
https://apps.db.ripe.net/search/abuse-finder.html https://labs.ripe.net/ripe-database/abuse-handling-in-the-ripe-database
Example API call in JSON:
https://apps.db.ripe.net/whois/use-cases/abuse- finder.json?source=ripe&primary-key=157.161.1.2
(also works without ssl)
Apparently Afrinic offers a similar API which I haven't found yet. If anyone knows of other such APIs on the other RIR, I would be delighted to know about them.
And of course there is the abusix.org contacts database via DNS:
$ host -t txt 0.0.161.157.abuse-contacts.abusix.org 0.0.161.157.abuse-contacts.abusix.org descriptive text "abuse@imp.ch"
Mit freundlichen Grüssen
Benoit Panizzon