Jump to content

Self-refering de-referencing loop


Recommended Posts

Tracking message source: 190.232.151.204:

Routing details for 190.232.151.204

[refresh/show] Cached whois for 190.232.151.204 : gestionip[at]telefonica.net.pe

De-referencing gestionip[at]telefonica.net.pe

abuse net telefonica.net.pe = teris[at]tp.com.pe, postmaster[at]telefonica.net.pe, gestionip[at]telefonica.net.pe, abuse[at]tdp.net.pe

Using best contacts teris[at]tp.com.pe postmaster[at]telefonica.net.pe gestionip[at]telefonica.net.pe abuse[at]tdp.net.pe

postmaster[at]telefonica.net.pe bounces (6 sent : 6 bounces)

Using postmaster#telefonica.net.pe[at]devnull.spamcop.net for statistical tracking.

gestionip[at]telefonica.net.pe redirects to telefonica.net.pe[at]abuse.net

De-referencing gestionip[at]telefonica.net.pe

abuse net telefonica.net.pe = teris[at]tp.com.pe, postmaster[at]telefonica.net.pe, gestionip[at]telefonica.net.pe, abuse[at]tdp.net.pe

postmaster[at]telefonica.net.pe bounces (6 sent : 6 bounces)

Using postmaster#telefonica.net.pe[at]devnull.spamcop.net for statistical tracking.

gestionip[at]telefonica.net.pe redirects to telefonica.net.pe[at]abuse.net

De-referencing gestionip[at]telefonica.net.pe

abuse net telefonica.net.pe = teris[at]tp.com.pe, postmaster[at]telefonica.net.pe, gestionip[at]telefonica.net.pe, abuse[at]tdp.net.pe

gestionip[at]telefonica.net.pe redirects to telefonica.net.pe[at]abuse.net

postmaster[at]telefonica.net.pe bounces (6 sent : 6 bounces)

I think this loop and NOT reporting to gestionip[at]telefonica.net.pe is not the intended beahavior.

Link to comment
Share on other sites

  • 3 months later...

This is still happening

Cached whois for 190.234.34.16 : gestionip[at]telefonica.net.pe
De-referencing gestionip[at]telefonica.net.pe
abuse net telefonica.net.pe = teris[at]tp.com.pe, postmaster[at]telefonica.net.pe, gestionip[at]telefonica.net.pe, abuse[at]tdp.net.pe
Using best contacts teris[at]tp.com.pe postmaster[at]telefonica.net.pe gestionip[at]telefonica.net.pe abuse[at]tdp.net.pe
postmaster[at]telefonica.net.pe bounces (6 sent : 6 bounces)
Using postmaster#telefonica.net.pe[at]devnull.spamcop.net for statistical tracking.
gestionip[at]telefonica.net.pe redirects to telefonica.net.pe[at]abuse.net
De-referencing gestionip[at]telefonica.net.pe
abuse net telefonica.net.pe = teris[at]tp.com.pe, postmaster[at]telefonica.net.pe, gestionip[at]telefonica.net.pe, abuse[at]tdp.net.pe
postmaster[at]telefonica.net.pe bounces (6 sent : 6 bounces)
Using postmaster#telefonica.net.pe[at]devnull.spamcop.net for statistical tracking.
gestionip[at]telefonica.net.pe redirects to telefonica.net.pe[at]abuse.net
De-referencing gestionip[at]telefonica.net.pe
abuse net telefonica.net.pe = teris[at]tp.com.pe, postmaster[at]telefonica.net.pe, gestionip[at]telefonica.net.pe, abuse[at]tdp.net.pe
gestionip[at]telefonica.net.pe redirects to telefonica.net.pe[at]abuse.net
postmaster[at]telefonica.net.pe bounces (6 sent : 6 bounces)

There is NO way to send reports to gestionip[at]telefonica.net.pe:

Report spam to:

Re: 190.234.34.16 (Administrator of network where email originates)
To: abuse[at]tdp.net.pe (Notes)
To: postmaster#telefonica.net.pe[at]devnull.spamcop.net (Notes)
To: teris[at]tp.com.pe (Notes)
Edited by A B
Link to comment
Share on other sites

This is still happening

There is NO way to send reports to gestionip[at]telefonica.net.pe:

That's true. Without an email address that does not bounce, there is no way to send reports to telefonica. Can you find an address that does not bounce?

Link to comment
Share on other sites

That's true. Without an email address that does not bounce, there is no way to send reports to telefonica. Can you find an address that does not bounce?

telefonica.net.pe does not exist?

They are now a "com.pe" although the abuse address is "net.pe"

http://www.telefonica.com.pe/home/

You can maybe try pecert [ at ] pcm.gob.pe

http://www.pecert.gob.pe/

Unclear myself as to why?

Link to comment
Share on other sites

That's true. Without an email address that does not bounce, there is no way to send reports to telefonica. Can you find an address that does not bounce?

The address found in the whois data does NOT bounce. But instead of using this address, SpamCop asks abuse.net for abuse addresses for telefonica.net.pe and finds the additional address postmaster[at]telefonica.net.pe. This one might bounce, I have not checked this. The real problem is, that SpamCop gets stuck in a loop, asking abuse.net for addresses for telefonica.net.pe, finding a telefonica.net.pe address in the response and asking abuse.net again. The loop is finally broken in the third round, but SpamCop still fails to report to gestionip[at]telefonica.net.pe

telefonica.net.pe does not exist?

This domain exists, has MX records and the servers are accepting mail for the mailbox gestionip. No issuses on their side (expect that they are using strange address for reporting abuse and maybe not having a postmaster address). The problem is on SpamCop's side.

Link to comment
Share on other sites

This domain exists, has MX records and the servers are accepting mail for the mailbox gestionip. No issuses on their side (expect that they are using strange address for reporting abuse and maybe not having a postmaster address). The problem is on SpamCop's side.

Got me lost then?

--- 07/08/15 09:53:37 AUS Eastern Standard Time

--- reading URL telefonica.net.pe

--- error: Host not found

--- 07/08/15 09:54:18 AUS Eastern Standard Time

--- reading URL http://www.telefonica.net.pe

--- error: Host not found

Just did a MX check

gestionip[at]TELEFONICA.NET.PE

Domain is run through Hotmail IP 65.54.188.109

Edited by petzl
Link to comment
Share on other sites

  • 4 weeks later...

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.

 Share

×
×
  • Create New...