Jump to content
Steve

Reporting addresses bouncing?

Recommended Posts

https://www.spamcop.net/sc?id=z6571118445z3f089fb00c95557d5b0557565f4701efz

 

Why do reporting addresses for either an IP address associated with an email or a link in the email that SC finds an IP to associate with bounce and why does the ISP/host do nothing to fix it? Here's an example of a recent email below:

 

 
Quote

 

[report history]
Host lustergroup.com (checking ip) = 110.4.46.157
Resolves to 110.4.46.157
Routing details for 110.4.46.157
[refresh/show] Cached whois for 110.4.46.157 : noc-abuse@mschosting.com noc@mschosting.com
Using abuse net on noc-abuse@mschosting.com
abuse net mschosting.com = tmcops@tm.net.my, postmaster@mschosting.com, postmaster@eastgate.net.my, postmaster@myloca.com, abuse@tm.net.my, hostmaster@mschosting.com, abuse@mschosting.com
Using best contacts tmcops@tm.net.my postmaster@mschosting.com postmaster@eastgate.net.my postmaster@myloca.com abuse@tm.net.my hostmaster@mschosting.com abuse@mschosting.com
tmcops@tm.net.my bounces (21 sent : 12 bounces)

Using tmcops#tm.net.my@devnull.spamcop.net for statistical tracking.

postmaster@mschosting.com bounces (261 sent : 131 bounces)

Using postmaster#mschosting.com@devnull.spamcop.net for statistical tracking.

postmaster@eastgate.net.my bounces (257 sent : 129 bounces)

Using postmaster#eastgate.net.my@devnull.spamcop.net for statistical tracking.

postmaster@myloca.com bounces (280 sent : 147 bounces)

Using postmaster#myloca.com@devnull.spamcop.net for statistical tracking.

abuse@tm.net.my redirects to abuse@tm.com.my
hostmaster@mschosting.com bounces (261 sent : 131 bounces)

Using hostmaster#mschosting.com@devnull.spamcop.net for statistical tracking.

 

 

Share this post


Link to post
Share on other sites

looking up the abuse.net db on mschosting .com shows the aforementioned list...

https://www.abuse.net/lookup.phtml?domain=mschosting.com

hostmaster and postmaster addresses are AFAIR quite old (10+ years) and often not used anymore... therefore the bounces.

The tmcops address could be an old entry as well and it was never updated...

There is also another possibility that all the addresses DO exist, but they have been either neglected or forgotten and the mailbox filled up and overflowed... ergo another bounce...

Officially, APNIC lists noc-abuse for the mentioned IP address as the abuse address

https://dnslytics.com/whois-lookup/110.4.46.157

Share this post


Link to post
Share on other sites
On 9/7/2019 at 11:49 PM, RobiBue said:

hostmaster and postmaster addresses are AFAIR quite old (10+ years) and often not used anymore... therefore the bounces.

 

This is in part why I have to check my whois for my domain every few months to make sure it is correct.  I am not sure if they have the same requirement for the whois for IP addresses.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

×