Caught by SPF rule whilst attempting to spoof a host/domain sending spam
<row>
<source_ip ...
show moreCaught by SPF rule whilst attempting to spoof a host/domain sending spam
<row>
<source_ip>103.133.11.176</source_ip>
<count>1</count>
<policy_evaluated>
<disposition>none</disposition>
<dkim>fail</dkim>
<spf>fail</spf>
</policy_evaluated>
</row>
show less
Caught by SPF rule trying to spoof host/domain sending spam
<row>
<source_ip>179.127.246 ...
show moreCaught by SPF rule trying to spoof host/domain sending spam
<row>
<source_ip>179.127.246.128</source_ip>
<count>1</count>
<policy_evaluated>
<disposition>none</disposition>
<dkim>fail</dkim>
<spf>fail</spf>
</policy_evaluated>
</row>
show less
Caught by SPF fail spoofing and spamming
<row>
<source_ip>181.62.53.245</source_ip>
...
show moreCaught by SPF fail spoofing and spamming
<row>
<source_ip>181.62.53.245</source_ip>
<count>1</count>
<policy_evaluated>
<disposition>none</disposition>
<dkim>fail</dkim>
<spf>fail</spf>
</policy_evaluated>
</row>
show less
caught by SPF domain spoofing in spam
<row>
<source_ip>183.80.230.210</source_ip>
...
show morecaught by SPF domain spoofing in spam
<row>
<source_ip>183.80.230.210</source_ip>
<count>1</count>
<policy_evaluated>
<disposition>none</disposition>
<dkim>fail</dkim>
<spf>fail</spf>
</policy_evaluated>
</row>
show less
caught by SPF
<row>
<source_ip>203.248.186.68</source_ip>
<count>1</count>
...
show morecaught by SPF
<row>
<source_ip>203.248.186.68</source_ip>
<count>1</count>
<policy_evaluated>
<disposition>none</disposition>
<dkim>fail</dkim>
<spf>fail</spf>
</policy_evaluated>
</row>
show less
caught by SPF
<row>
<source_ip>81.136.184.29</source_ip>
<count>1</count>
...
show morecaught by SPF
<row>
<source_ip>81.136.184.29</source_ip>
<count>1</count>
<policy_evaluated>
<disposition>none</disposition>
<dkim>fail</dkim>
<spf>fail</spf>
</policy_evaluated>
</row>
show less
caught by SPF
<row>
<source_ip>14.228.16.103</source_ip>
<count>1</count>
...
show morecaught by SPF
<row>
<source_ip>14.228.16.103</source_ip>
<count>1</count>
<policy_evaluated>
<disposition>none</disposition>
<dkim>fail</dkim>
<spf>fail</spf>
</policy_evaluated>
</row>
show less
caught by SPF fails attempting to spoof one of my servers (not even the right server lol)
<row> ...
show morecaught by SPF fails attempting to spoof one of my servers (not even the right server lol)
<row>
<source_ip>200.105.215.18</source_ip>
<count>1</count>
<policy_evaluated>
<disposition>none</disposition>
<dkim>fail</dkim>
<spf>fail</spf>
</policy_evaluated>
</row>
show less
caught by SPF policy
<row>
<source_ip>24.250.137.65</source_ip>
<count>2</cou ...
show morecaught by SPF policy
<row>
<source_ip>24.250.137.65</source_ip>
<count>2</count>
<policy_evaluated>
<disposition>none</disposition>
<dkim>fail</dkim>
<spf>fail</spf>
</policy_evaluated>
</row>
show less
SPF/DKIM fail trying to mail with my domain in the header.
<source_ip>5.183.181.213</sourc ...
show moreSPF/DKIM fail trying to mail with my domain in the header.
<source_ip>5.183.181.213</source_ip>
<count>1</count>
<policy_evaluated>
<disposition>none</disposition>
<dkim>fail</dkim>
<spf>fail</spf>
</policy_evaluated>
show less
SPF and DKIM fail trying to spoof my domain (spammer)
<row>
<source_ip>200.205.138.242< ...
show moreSPF and DKIM fail trying to spoof my domain (spammer)
<row>
<source_ip>200.205.138.242</source_ip>
<count>2</count>
<policy_evaluated>
<disposition>none</disposition>
<dkim>fail</dkim>
<spf>fail</spf>
</policy_evaluated>
</row>
show less
Failing SPF and DKIM tests attempting to send mail claiming to be from my domain.
<row>
...
show moreFailing SPF and DKIM tests attempting to send mail claiming to be from my domain.
<row>
<source_ip>36.37.131.226</source_ip>
<count>1</count>
<policy_evaluated>
<disposition>none</disposition>
<dkim>fail</dkim>
<spf>fail</spf>
</policy_evaluated>
</row>
show less
failing SPF trying to spoof a server in my domain.
<row>
<source_ip>136.232.128.18</so ...
show morefailing SPF trying to spoof a server in my domain.
<row>
<source_ip>136.232.128.18</source_ip>
<count>1</count>
<policy_evaluated>
<disposition>none</disposition>
<dkim>fail</dkim>
<spf>fail</spf>
</policy_evaluated>
</row>
show less
triggering SPF fails attempting to spam claiming to be one of my mailservers
<row>
<sour ...
show moretriggering SPF fails attempting to spam claiming to be one of my mailservers
<row>
<source_ip>138.0.88.4</source_ip>
<count>1</count>
<policy_evaluated>
<disposition>none</disposition>
<dkim>fail</dkim>
<spf>fail</spf>
</policy_evaluated>
</row>
show less
failed SPF/DKIM tests. Spammer masquerading as another hostname.
<row>
<source_ip>212 ...
show morefailed SPF/DKIM tests. Spammer masquerading as another hostname.
<row>
<source_ip>212.112.109.37</source_ip>
<count>1</count>
<policy_evaluated>
<disposition>none</disposition>
<dkim>fail</dkim>
<spf>fail</spf>
</policy_evaluated>
</row>
show less
probably exploited host. Getting SPF error reports sent to me because it's claiming to be a server ...
show moreprobably exploited host. Getting SPF error reports sent to me because it's claiming to be a server in my domain, but isn't that server anyway.
<row>
<source_ip>86.14.191.91</source_ip>
<count>1</count>
<policy_evaluated>
<disposition>none</disposition>
<dkim>fail</dkim>
<spf>fail</spf>
</policy_evaluated>
</row>
show less
Port scan, mostly blocked and jailed by fail2ban/ufw. Got a sample packet:
Malformed data, canno ...
show morePort scan, mostly blocked and jailed by fail2ban/ufw. Got a sample packet:
Malformed data, cannot parse 14 byte packet from 64.227.97.195:58487, data 38 6C 23 87 7D 8F EF F0 93 00 00 00 00 00:
show less