spf-discuss
[Top] [All Lists]

RE: Joe-Job Caught!

2004-02-18 10:07:33
Log cleaned up some:

Connection from 212.199.255.72.forward.012.net.il (212.199.255.72)
SPF fail: ly5(_at_)aquent(_dot_)com for alaia.net
Termination from 212.199.255.72.forward.012.net.il (212.199.255.72)
Connection from (219.248.239.184)
SPF fail: ly5(_at_)aquent(_dot_)com for alaia.net
Termination from (219.248.239.184)
Connection from c-24-245-25-24.mn.client2.attbi.com (24.245.25.24)
SPF fail: ly5(_at_)aquent(_dot_)com for alaia.net
Termination from c-24-245-25-24.mn.client2.attbi.com (24.245.25.24)
Connection from h0001022aede1.ne.client2.attbi.com (65.96.16.102)
SPF fail: ly5(_at_)aquent(_dot_)com for alaia.net
Termination from h0001022aede1.ne.client2.attbi.com (65.96.16.102)
Connection from adsl-66-124-241-221.dsl.snfc21.pacbell.net (66.124.241.221)
SPF fail: ly5(_at_)aquent(_dot_)com for alaia.net
Termination from adsl-66-124-241-221.dsl.snfc21.pacbell.net (66.124.241.221
Connection from (203.199.16.210)
SPF fail: ly5(_at_)aquent(_dot_)com for alaia.net
Termination from (203.199.16.210)
Connection from pcp01444418pcs.watrfd01.mi.comcast.net (68.60.39.252)
SPF fail: ly5(_at_)aquent(_dot_)com for alaia.net
Termination from pcp01444418pcs.watrfd01.mi.comcast.net (68.60.39.252)
Connection from CPE-24-27-145-97.neb.rr.com (24.27.145.97)
SPF fail: ly5(_at_)aquent(_dot_)com for alaia.net
Termination from CPE-24-27-145-97.neb.rr.com (24.27.145.97)
Connection from pcp955108pcs.bechgr01.in.comcast.net (68.57.213.7)
SPF fail: ly5(_at_)aquent(_dot_)com for alaia.net
Termination from pcp955108pcs.bechgr01.in.comcast.net (68.57.213.7)
Connection from pf-66-191-227-114.chartertn.net (66.191.227.114)
SPF fail: ly5(_at_)aquent(_dot_)com for alaia.net
Termination from pf-66-191-227-114.chartertn.net (66.191.227.114)
Connection from (210.102.21.223)
SPF fail: ly5(_at_)aquent(_dot_)com for alaia.net
Termination from (210.102.21.223)
Connection from (210.217.36.122)
SPF fail: ly5(_at_)aquent(_dot_)com for alaia.net
Termination from (210.217.36.122)
Connection from h0001032a75b0.ne.client2.attbi.com (24.147.91.212)
SPF fail: ly5(_at_)aquent(_dot_)com for alaia.net
Termination from h0001032a75b0.ne.client2.attbi.com (24.147.91.212)
Connection from ip-wv-68-113-137-168.charterwv.net (68.113.137.168)
SPF fail: ly5(_at_)aquent(_dot_)com for alaia.net
Termination from ip-wv-68-113-137-168.charterwv.net (68.113.137.168)
Connection from h0001022aede1.ne.client2.attbi.com (65.96.16.102)
SPF fail: ly5(_at_)aquent(_dot_)com for alaia.net
Termination from h0001022aede1.ne.client2.attbi.com (65.96.16.102)
Connection from TSU-68-34-87-26.tsu01.md.comcast.net (68.34.87.26)
SPF fail: ly5(_at_)aquent(_dot_)com for alaia.net
Termination from TSU-68-34-87-26.tsu01.md.comcast.net (68.34.87.26)
Connection from SP2-24.207.225.74.charter-stl.com (24.207.225.74)
SPF fail: ly5(_at_)aquent(_dot_)com for alaia.net
Termination from SP2-24.207.225.74.charter-stl.com (24.207.225.74)
Connection from c-24-99-136-110.atl.client2.attbi.com (24.99.136.110)
SPF fail: ly5(_at_)aquent(_dot_)com for alaia.net
Termination from c-24-99-136-110.atl.client2.attbi.com (24.99.136.110)
Connection from c-66-229-104-113.we.client2.attbi.com (66.229.104.113)
SPF fail: ly5(_at_)aquent(_dot_)com for alaia.net
Termination from c-66-229-104-113.we.client2.attbi.com (66.229.104.113)

Marc

-----Original Message-----
From: Marc Alaia [mailto:marc(_at_)alaia(_dot_)net]
Sent: Wednesday, February 18, 2004 12:00 PM
To: 'spf-discuss(_at_)v2(_dot_)listbox(_dot_)com'
Subject: [spf-discuss] Joe-Job Caught!


Well, looks like my SPF proxy caught someone joe-jobbing one particular user
at aquent.com.  Lasted for about 7 minutes then quit.  Anybody else seeing
any?

Marc

|   ID  | level   | Status
| timestamp      |
| 31780 | info    | Connection from 212.199.255.72.forward.012.net.il
(212.199.255.72)           | 20040218090940 |
| 31781 | info    | SPF fail: ly5(_at_)aquent(_dot_)com for alaia.net
| 20040218090950 |
| 31782 | info    | Termination from 212.199.255.72.forward.012.net.il
(212.199.255.72)          | 20040218090951 |
| 31787 | info    | Connection from  (219.248.239.184)
| 20040218091032 |
| 31788 | info    | SPF fail: ly5(_at_)aquent(_dot_)com for alaia.net
| 20040218091033 |
| 31789 | info    | Termination from  (219.248.239.184)
| 20040218091034 |
| 31790 | info    | Connection from c-24-245-25-24.mn.client2.attbi.com
(24.245.25.24)           | 20040218091141 |
| 31791 | info    | SPF fail: ly5(_at_)aquent(_dot_)com for alaia.net
| 20040218091142 |
| 31792 | info    | Termination from c-24-245-25-24.mn.client2.attbi.com
(24.245.25.24)          | 20040218091142 |
| 31793 | info    | Connection from h0001022aede1.ne.client2.attbi.com
(65.96.16.102)            | 20040218091144 |
| 31794 | info    | SPF fail: ly5(_at_)aquent(_dot_)com for alaia.net
| 20040218091145 |
| 31795 | info    | Termination from h0001022aede1.ne.client2.attbi.com
(65.96.16.102)           | 20040218091145 |
| 31796 | info    | Connection from
adsl-66-124-241-221.dsl.snfc21.pacbell.net (66.124.241.221)  |
20040218091212 |
| 31797 | info    | SPF fail: ly5(_at_)aquent(_dot_)com for alaia.net
| 20040218091213 |
| 31798 | info    | Termination from
adsl-66-124-241-221.dsl.snfc21.pacbell.net (66.124.241.221) | 20040218091213
|
| 31799 | info    | Connection from  (203.199.16.210)
| 20040218091254 |
| 31800 | info    | SPF fail: ly5(_at_)aquent(_dot_)com for alaia.net
| 20040218091256 |
| 31801 | info    | Termination from  (203.199.16.210)
| 20040218091257 |
| 31802 | info    | Connection from pcp01444418pcs.watrfd01.mi.comcast.net
(68.60.39.252)        | 20040218091305 |
| 31803 | info    | SPF fail: ly5(_at_)aquent(_dot_)com for alaia.net
| 20040218091308 |
| 31804 | info    | Termination from pcp01444418pcs.watrfd01.mi.comcast.net
(68.60.39.252)       | 20040218091310 |
| 31805 | info    | Connection from CPE-24-27-145-97.neb.rr.com
(24.27.145.97)                   | 20040218091312 |
| 31806 | info    | SPF fail: ly5(_at_)aquent(_dot_)com for alaia.net
| 20040218091313 |
| 31807 | info    | Termination from CPE-24-27-145-97.neb.rr.com
(24.27.145.97)                  | 20040218091313 |
| 31814 | info    | Connection from pcp955108pcs.bechgr01.in.comcast.net
(68.57.213.7)           | 20040218091356 |
| 31816 | info    | SPF fail: ly5(_at_)aquent(_dot_)com for alaia.net
| 20040218091357 |
| 31817 | info    | Termination from pcp955108pcs.bechgr01.in.comcast.net
(68.57.213.7)          | 20040218091357 |
| 31818 | info    | Connection from pf-66-191-227-114.chartertn.net
(66.191.227.114)             | 20040218091430 |
| 31819 | info    | SPF fail: ly5(_at_)aquent(_dot_)com for alaia.net
| 20040218091438 |
| 31820 | info    | Termination from pf-66-191-227-114.chartertn.net
(66.191.227.114)            | 20040218091441 |
| 31823 | info    | Connection from  (210.102.21.223)
| 20040218091457 |
| 31824 | info    | SPF fail: ly5(_at_)aquent(_dot_)com for alaia.net
| 20040218091458 |
| 31825 | info    | Termination from  (210.102.21.223)
| 20040218091459 |
| 31826 | info    | Connection from  (210.217.36.122)
| 20040218091501 |
| 31827 | info    | SPF fail: ly5(_at_)aquent(_dot_)com for alaia.net
| 20040218091503 |
| 31828 | info    | Termination from  (210.217.36.122)
| 20040218091503 |
| 31829 | info    | Connection from h0001032a75b0.ne.client2.attbi.com
(24.147.91.212)           | 20040218091509 |
| 31830 | info    | SPF fail: ly5(_at_)aquent(_dot_)com for alaia.net
| 20040218091509 |
| 31831 | info    | Termination from h0001032a75b0.ne.client2.attbi.com
(24.147.91.212)          | 20040218091510 |
| 31832 | info    | Connection from ip-wv-68-113-137-168.charterwv.net
(68.113.137.168)          | 20040218091511 |
| 31833 | info    | SPF fail: ly5(_at_)aquent(_dot_)com for alaia.net
| 20040218091512 |
| 31834 | info    | Termination from ip-wv-68-113-137-168.charterwv.net
(68.113.137.168)         | 20040218091512 |
| 31835 | info    | Connection from h0001022aede1.ne.client2.attbi.com
(65.96.16.102)            | 20040218091526 |
| 31836 | info    | SPF fail: ly5(_at_)aquent(_dot_)com for alaia.net
| 20040218091528 |
| 31837 | info    | Termination from h0001022aede1.ne.client2.attbi.com
(65.96.16.102)           | 20040218091528 |
| 31838 | info    | Connection from TSU-68-34-87-26.tsu01.md.comcast.net
(68.34.87.26)           | 20040218091536 |
| 31839 | info    | SPF fail: ly5(_at_)aquent(_dot_)com for alaia.net
| 20040218091537 |
| 31840 | info    | Termination from TSU-68-34-87-26.tsu01.md.comcast.net
(68.34.87.26)          | 20040218091537 |
| 31845 | info    | Connection from SP2-24.207.225.74.charter-stl.com
(24.207.225.74)            | 20040218091552 |
| 31846 | info    | SPF fail: ly5(_at_)aquent(_dot_)com for alaia.net
| 20040218091553 |
| 31847 | info    | Termination from SP2-24.207.225.74.charter-stl.com
(24.207.225.74)           | 20040218091553 |
| 31849 | info    | Connection from c-24-99-136-110.atl.client2.attbi.com
(24.99.136.110)        | 20040218091615 |
| 31850 | info    | SPF fail: ly5(_at_)aquent(_dot_)com for alaia.net
| 20040218091618 |
| 31851 | info    | Termination from c-24-99-136-110.atl.client2.attbi.com
(24.99.136.110)       | 20040218091618 |
| 31852 | info    | Connection from c-66-229-104-113.we.client2.attbi.com
(66.229.104.113)       | 20040218091652 |
| 31853 | info    | SPF fail: ly5(_at_)aquent(_dot_)com for alaia.net
| 20040218091653 |
| 31854 | info    | Termination from c-66-229-104-113.we.client2.attbi.com
(66.229.104.113)      | 20040218091653 |

-------
Sender Policy Framework: http://spf.pobox.com/
Archives at http://archives.listbox.com/spf-discuss/current/
Latest draft at http://spf.pobox.com/spf-draft-20040209.txt
Wiki: http://spfwiki.infinitepenguins.net/pmwiki.php/SenderPermittedFrom/
To unsubscribe, change your address, or temporarily deactivate your
subscription, 
please go to
http://v2.listbox.com/member/?listname(_at_)©#«Mo\¯HÝÜîU;±¤Ö¤Íµø?¡


<Prev in Thread] Current Thread [Next in Thread>