spam/virus reporting to

What is the usual etiquette for informing an abuse email address at an ISP
that spam/viruses appear to be coming from a certain IP in their block?

I was just going to send the headers from the various emails.
The 'spam' engine is spoofing various domains
I'd guess that the box is owned.

Relevant Pages