Reporting abuse with XARF

by | Mar 4, 2024

Reporting abuse with XARF

XARF stands for eXtended Abuse Reporting Format

It is a new format designed to make abuse reporting easier for network owners/managers.

Originally launched as an open community initiative, XARF is now the industry standard for sharing network abuse reports.

Except for ARF, XARF is independent from the underlying transport medium, as it is a simple JSON document that can be used across multiple channels.

ARF is a standard for reporting abuse, but it is only sent by e-mail, unlike XARF, which is a JSON document and can therefore be sent through all possible channels.

Why use XARF?

XARF can be used to report different types of abuse, for example :

  • Spam
  • Phishing attacks
  • Hosted malware
  • Illegal content
  • Copyright issues
  • DDOS attacks

See full list

The benefit of using XARF is that JSON content can be easily parsed for automated processing.

Who uses XARF?

The XARF format was created by Abusix and is used for their (normal) abuse reporting service.

Other companies using XARF:

  • Swisscom
  • Mimecast
  • Stackpath
  • KPN
  • Vodafone

 

See also: [Tutorial] How to install Glitchtip for error handling