Mail sender domain/host spoofing, caught by spf/dkim:
<row>
<source_ip>43.228.110.241< ...
show moreMail sender domain/host spoofing, caught by spf/dkim:
<row>
<source_ip>43.228.110.241</source_ip>
<count>10</count>
<policy_evaluated>
<disposition>none</disposition>
<dkim>fail</dkim>
<spf>fail</spf>
</policy_evaluated>
</row>
show less
Spoofing sending mail header, caught by dmarc/spf:
<row>
<source_ip>187.189.37.57</sou ...
show moreSpoofing sending mail header, caught by dmarc/spf:
<row>
<source_ip>187.189.37.57</source_ip>
<count>2</count>
<policy_evaluated>
<disposition>none</disposition>
<dkim>fail</dkim>
<spf>fail</spf>
</policy_evaluated>
</row>
show less
attempt to spoof a host of mine to send mail, denied by spf/demarc
<row>
<source_ip>1 ...
show moreattempt to spoof a host of mine to send mail, denied by spf/demarc
<row>
<source_ip>14.254.19.228</source_ip>
<count>2</count>
<policy_evaluated>
<disposition>none</disposition>
<dkim>fail</dkim>
<spf>fail</spf>
</policy_evaluated>
</row>
show less
attempt to spoof mail domain, caught via spf/dmarc fail
<row>
<source_ip>41.41.60.191< ...
show moreattempt to spoof mail domain, caught via spf/dmarc fail
<row>
<source_ip>41.41.60.191</source_ip>
<count>1</count>
<policy_evaluated>
<disposition>none</disposition>
<dkim>fail</dkim>
<spf>fail</spf>
</policy_evaluated>
</row>
show less
attempt to spoof domain, caught by spf/dmarc fail
<record>
<row>
<source_ip>202.150 ...
show moreattempt to spoof domain, caught by spf/dmarc fail
<record>
<row>
<source_ip>202.150.134.106</source_ip>
<count>1</count>
<policy_evaluated>
<disposition>none</disposition>
<dkim>fail</dkim>
<spf>fail</spf>
</policy_evaluated>
</row>
show less
DMARC/SPF fail (attempting to spoof a domain)
<record>
<row>
<source_ip>77.94.47.106< ...
show moreDMARC/SPF fail (attempting to spoof a domain)
<record>
<row>
<source_ip>77.94.47.106</source_ip>
<count>2</count>
<policy_evaluated>
<disposition>none</disposition>
<dkim>fail</dkim>
<spf>fail</spf>
</policy_evaluated>
</row>
show less
attacked a Teamspeak server, flooded with requests. Looks like it was trying to login using spoofed ...
show moreattacked a Teamspeak server, flooded with requests. Looks like it was trying to login using spoofed IP addresses.
show less
Failed DMARC/SPF attempting to spoof a server of mine to Yahoo
<row>
<source_ip>160.155 ...
show moreFailed DMARC/SPF attempting to spoof a server of mine to Yahoo
<row>
<source_ip>160.155.171.212</source_ip>
<count>3</count>
<policy_evaluated>
<disposition>none</disposition>
<dkim>fail</dkim>
<spf>fail</spf>
</policy_evaluated>
</row>
show less
failed SPF attempting to send to Google... as one of my hosts.
<row>
<source_ip>196.64.2 ...
show morefailed SPF attempting to send to Google... as one of my hosts.
<row>
<source_ip>196.64.245.232</source_ip>
<count>1</count>
<policy_evaluated>
<disposition>none</disposition>
<dkim>fail</dkim>
<spf>fail</spf>
</policy_evaluated>
</row>
show less
Failed SPF rules via Google
<row>
<source_ip>27.66.115.167</source_ip>
<count>1</ ...
show moreFailed SPF rules via Google
<row>
<source_ip>27.66.115.167</source_ip>
<count>1</count>
<policy_evaluated>
<disposition>none</disposition>
<dkim>fail</dkim>
<spf>fail</spf>
</policy_evaluated>
</row>
means it is spoofing
show less
caught by SPF policy fail attempting to spam Google.
<record>
<row>
<source_ip>200 ...
show morecaught by SPF policy fail attempting to spam Google.
<record>
<row>
<source_ip>200.219.195.34</source_ip>
<count>1</count>
<policy_evaluated>
<disposition>none</disposition>
<dkim>fail</dkim>
<spf>fail</spf>
</policy_evaluated>
</row>
show less
Caught by SPF rules spoofing a host from my domain:
<row>
<source_ip>14.180.143.148</s ...
show moreCaught by SPF rules spoofing a host from my domain:
<row>
<source_ip>14.180.143.148</source_ip>
<count>1</count>
<policy_evaluated>
<disposition>none</disposition>
<dkim>fail</dkim>
<spf>fail</spf>
</policy_evaluated>
</row>
show less
Failed SPF rules spoofing to Google pretending to be one of my servers
<row>
<source_i ...
show moreFailed SPF rules spoofing to Google pretending to be one of my servers
<row>
<source_ip>181.48.187.174</source_ip>
<count>1</count>
<policy_evaluated>
<disposition>none</disposition>
<dkim>fail</dkim>
<spf>fail</spf>
</policy_evaluated>
</row>
show less
Caught by SPF rule
<row>
<source_ip>114.30.86.194</source_ip>
<count>1</coun ...
show moreCaught by SPF rule
<row>
<source_ip>114.30.86.194</source_ip>
<count>1</count>
<policy_evaluated>
<disposition>none</disposition>
<dkim>fail</dkim>
<spf>fail</spf>
</policy_evaluated>
</row>
show less
caught in DMARC report trying to send mail as my domain
<row>
<source_ip>59.4.139.248</s ...
show morecaught in DMARC report trying to send mail as my domain
<row>
<source_ip>59.4.139.248</source_ip>
<count>1</count>
<policy_evaluated>
<disposition>none</disposition>
<dkim>fail</dkim>
<spf>fail</spf>
</policy_evaluated>
</row>
show less
Reported in DMARC report spoofing my mail domain
<row>
<source_ip>37.192.34.217</source_i ...
show moreReported in DMARC report spoofing my mail domain
<row>
<source_ip>37.192.34.217</source_ip>
<count>1</count>
<policy_evaluated>
<disposition>none</disposition>
<dkim>fail</dkim>
<spf>fail</spf>
</policy_evaluated>
</row>
show less