Abuse Email Exclusion List

This repository contains a list of email addresses that are excluded from receiving abuse reports from ducks.party honeypots. The purpose is to optimize abuse reporting by avoiding sending reports to addresses where they are likely to be ignored or rejected.

Purpose

The exclusion list helps:

• Preserve email quota limits for honeypots
• Avoid wasting time of abuse handling teams
• Focus reports on actionable recipients

Exclusion Criteria

Email addresses are added to this list for the following reasons:

1. Rejecting Emails: Addresses that actively reject incoming abuse reports
2. Non-Responsive Services: Bulletproof hosting providers that consistently ignore abuse reports
3. Privacy Services: Tor exit node providers and VPN services
4. Home ISPs: Internet Service Providers for residential connections
5. Internet Scanning Companies: Organizations like Shodan, Censys, and other legitimate internet scanning services

Notable Exception: Amazon Web Services

While AWS (abuse@amazonaws.com) actively handles abuse reports, it is included in this exclusion list because:

• AWS is used by a large number of legitimate Internet scanning companies
• Out of the large number of honeypot triggers, only a few are true abuses
• High volume of reports would unnecessarily burden AWS abuse team
• Preserves email quota for more actionable cases

Contributing

If you know of additional addresses that should be excluded based on the criteria above, please submit a pull request with:

1. The email address to be excluded
2. The reason for exclusion
3. Any supporting evidence or context