Jump to content
Sign in to follow this  
A B

Self-refering de-referencing loop

Recommended Posts

Tracking message source: 190.232.151.204:

Routing details for 190.232.151.204

[refresh/show] Cached whois for 190.232.151.204 : gestionip[at]telefonica.net.pe

De-referencing gestionip[at]telefonica.net.pe

abuse net telefonica.net.pe = teris[at]tp.com.pe, postmaster[at]telefonica.net.pe, gestionip[at]telefonica.net.pe, abuse[at]tdp.net.pe

Using best contacts teris[at]tp.com.pe postmaster[at]telefonica.net.pe gestionip[at]telefonica.net.pe abuse[at]tdp.net.pe

postmaster[at]telefonica.net.pe bounces (6 sent : 6 bounces)

Using postmaster#telefonica.net.pe[at]devnull.spamcop.net for statistical tracking.

gestionip[at]telefonica.net.pe redirects to telefonica.net.pe[at]abuse.net

De-referencing gestionip[at]telefonica.net.pe

abuse net telefonica.net.pe = teris[at]tp.com.pe, postmaster[at]telefonica.net.pe, gestionip[at]telefonica.net.pe, abuse[at]tdp.net.pe

postmaster[at]telefonica.net.pe bounces (6 sent : 6 bounces)

Using postmaster#telefonica.net.pe[at]devnull.spamcop.net for statistical tracking.

gestionip[at]telefonica.net.pe redirects to telefonica.net.pe[at]abuse.net

De-referencing gestionip[at]telefonica.net.pe

abuse net telefonica.net.pe = teris[at]tp.com.pe, postmaster[at]telefonica.net.pe, gestionip[at]telefonica.net.pe, abuse[at]tdp.net.pe

gestionip[at]telefonica.net.pe redirects to telefonica.net.pe[at]abuse.net

postmaster[at]telefonica.net.pe bounces (6 sent : 6 bounces)

I think this loop and NOT reporting to gestionip[at]telefonica.net.pe is not the intended beahavior.

Share this post


Link to post
Share on other sites

This is still happening

Cached whois for 190.234.34.16 : gestionip[at]telefonica.net.pe
De-referencing gestionip[at]telefonica.net.pe
abuse net telefonica.net.pe = teris[at]tp.com.pe, postmaster[at]telefonica.net.pe, gestionip[at]telefonica.net.pe, abuse[at]tdp.net.pe
Using best contacts teris[at]tp.com.pe postmaster[at]telefonica.net.pe gestionip[at]telefonica.net.pe abuse[at]tdp.net.pe
postmaster[at]telefonica.net.pe bounces (6 sent : 6 bounces)
Using postmaster#telefonica.net.pe[at]devnull.spamcop.net for statistical tracking.
gestionip[at]telefonica.net.pe redirects to telefonica.net.pe[at]abuse.net
De-referencing gestionip[at]telefonica.net.pe
abuse net telefonica.net.pe = teris[at]tp.com.pe, postmaster[at]telefonica.net.pe, gestionip[at]telefonica.net.pe, abuse[at]tdp.net.pe
postmaster[at]telefonica.net.pe bounces (6 sent : 6 bounces)
Using postmaster#telefonica.net.pe[at]devnull.spamcop.net for statistical tracking.
gestionip[at]telefonica.net.pe redirects to telefonica.net.pe[at]abuse.net
De-referencing gestionip[at]telefonica.net.pe
abuse net telefonica.net.pe = teris[at]tp.com.pe, postmaster[at]telefonica.net.pe, gestionip[at]telefonica.net.pe, abuse[at]tdp.net.pe
gestionip[at]telefonica.net.pe redirects to telefonica.net.pe[at]abuse.net
postmaster[at]telefonica.net.pe bounces (6 sent : 6 bounces)

There is NO way to send reports to gestionip[at]telefonica.net.pe:

Report spam to:

Re: 190.234.34.16 (Administrator of network where email originates)
To: abuse[at]tdp.net.pe (Notes)
To: postmaster#telefonica.net.pe[at]devnull.spamcop.net (Notes)
To: teris[at]tp.com.pe (Notes)
Edited by A B

Share this post


Link to post
Share on other sites

This is still happening

There is NO way to send reports to gestionip[at]telefonica.net.pe:

That's true. Without an email address that does not bounce, there is no way to send reports to telefonica. Can you find an address that does not bounce?

Share this post


Link to post
Share on other sites

That's true. Without an email address that does not bounce, there is no way to send reports to telefonica. Can you find an address that does not bounce?

telefonica.net.pe does not exist?

They are now a "com.pe" although the abuse address is "net.pe"

http://www.telefonica.com.pe/home/

You can maybe try pecert [ at ] pcm.gob.pe

http://www.pecert.gob.pe/

Unclear myself as to why?

Share this post


Link to post
Share on other sites

That's true. Without an email address that does not bounce, there is no way to send reports to telefonica. Can you find an address that does not bounce?

The address found in the whois data does NOT bounce. But instead of using this address, SpamCop asks abuse.net for abuse addresses for telefonica.net.pe and finds the additional address postmaster[at]telefonica.net.pe. This one might bounce, I have not checked this. The real problem is, that SpamCop gets stuck in a loop, asking abuse.net for addresses for telefonica.net.pe, finding a telefonica.net.pe address in the response and asking abuse.net again. The loop is finally broken in the third round, but SpamCop still fails to report to gestionip[at]telefonica.net.pe

telefonica.net.pe does not exist?

This domain exists, has MX records and the servers are accepting mail for the mailbox gestionip. No issuses on their side (expect that they are using strange address for reporting abuse and maybe not having a postmaster address). The problem is on SpamCop's side.

Share this post


Link to post
Share on other sites

This domain exists, has MX records and the servers are accepting mail for the mailbox gestionip. No issuses on their side (expect that they are using strange address for reporting abuse and maybe not having a postmaster address). The problem is on SpamCop's side.

Got me lost then?

--- 07/08/15 09:53:37 AUS Eastern Standard Time

--- reading URL telefonica.net.pe

--- error: Host not found

--- 07/08/15 09:54:18 AUS Eastern Standard Time

--- reading URL http://www.telefonica.net.pe

--- error: Host not found

Just did a MX check

gestionip[at]TELEFONICA.NET.PE

Domain is run through Hotmail IP 65.54.188.109

Edited by petzl

Share this post


Link to post
Share on other sites

Nearly one month has passed, since it happened the last time. Today I had this situation again. This problem is still present.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now
Sign in to follow this  

×