Sh4mefulAbout this archive
Sh4meful was a public view into a private DMARC corpus. Every entry was an IP address that failed both SPF and DKIM authentication for a domain under my administration, drawn from DMARC aggregate reports and enriched with geolocation, network ownership and reverse DNS. It ran continuously for 31 months and then stopped, having done what it set out to do.
What is still here
The pages are exactly as the application last rendered them: the country, network, owner and IP intelligence pages, the activity charts, the choropleth map, and the written analysis on the blog. Nothing is recalculated and nothing will change again.
What is gone
Search, sorting by querystring, pagination and the MCP endpoint all belonged to the running application. Tables still sort and filter, but in your browser rather than on a server. Any address that used to take a query parameter now lands on a short notice instead of an error.
Where the work continues
The thinking behind this dataset feeds DmarcSignal, a free DMARC monitoring service. The rest of my work is at Christian Ricci, LLC.