Should collect abuse cases (e.g. IPs) until some amount of time has passed since the last incident, or a threshold of incidents has occurred, and email abuse@whatever automatically