Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I know two methods of obtaining this:

  • whois registrar record
  • SOA DNS record

However, when signing up for an e-mail feedback loop program, the ISP came back with the e-mail address of one of our managers as the contact. That e-mail address does not appear in any of the information above.

What other methods can you obtain an administrative e-mail contact for a domain? It is a valid e-mail domain in this case.

share|improve this question
The manager signed up at the ISP. – mailq Oct 29 '11 at 20:30
I doubt that is the case but I suppose it is possible. This seems like it's automatically retrieved from somewhere though. Unfortunately, the manager is ill and will be on sick leave indefinitely. – Belmin Fernandez Oct 29 '11 at 20:32
Think I may have found my answer: They are performing a whois on the IP address of the e-mail gateways provided in the form. – Belmin Fernandez Oct 29 '11 at 20:37
up vote 1 down vote accepted

There are only few services that provide abuse contacts beside WHOIS and SOA. The ones I know are:


But it is even possible that the abuse contact is maintained manually in feedback loops.

share|improve this answer
Although this isn't the exact answer (could be found in my comment to the question), these are other resources which I was unaware of. Thank you! – Belmin Fernandez Oct 30 '11 at 2:31

The whois system is the traditional way of getting this information. The other traditional thing to do is email abuse@ -- If there's a domain associated with the IP start there, and work your way through the upstream providers until you get a response.

The address in DNS SOA records may not be related to anything but DNS, and sometimes isn't even valid.
In my experience whois is the best place to go.

share|improve this answer

If you own the whole block of IP it might come from arin's information regarding the block itself.

Arin keeps three different contact, Tech, Admin and Abuse.

That manager might be the Admin contact.

share|improve this answer

whois and dig SOA reveal the public information about a domain and it's DNS.

The manager may also be listed under the tech contact for the ip block if you are a ripe member (you can check that with whois).

I've also noticed, the registrars usually keep the email addresses on file of what the admin/tech etc contacts are set to.

I've had this previously with nominet emailing an old address in regards to an issue, rather than the one on the whois.

Hope this helps.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.