Shame on you, stupid spammers.. Sh4meful  DMARC Spoof Detection

IP Address: 165.140.171.84 โš  IP Confounder

This page shows DMARC authentication failure data for this IP address. Learn more about this data.

Geolocation Information
Country:
US United States
Coordinates:
37.751, -97.822
WHOIS Information
Network Name:
PAUBOX-01
CIDR:
165.140.171.0/24
Owner:
Paubox, Inc.
Org ID:
PAUBO
Address:
5 3rd St, Suite 324, San Francisco, CA 94103
Reverse DNS:
outbound8-encrypted-mta.paubox.com
Last updated: 2/5/2026

Analysis

This IP is classified as a confounder: Paubox โ€” Breaks Auth (SPF, DKIM, DMARC). Unclear if byproduct of mis-configuration. Vendor description: Uses generative AI to detect nuanced anomalies in sender behavior, tone, and context to surface hidden threats.. Failures observed from this source are expected artifacts of legitimate mail-handling behavior, typically email forwarding or mailing-list processing, and do not indicate spoofing attempts.

The host is operated by Paubox, Inc and geolocates to United States. Its presence in DMARC aggregate reports is an artifact of how forwarded mail interacts with SPF and DKIM authentication, not a sign of abuse originating from this address.

Administrators observing this IP in their DMARC aggregate reports should not block or treat it as hostile. Consult the documentation for this mail-handling service to determine whether your SPF record should be updated to include its relay addresses, or whether ARC sealing is appropriate for your configuration.

IP Confounder: Paubox โ€” Breaks Auth (SPF, DKIM, DMARC). Unclear if byproduct of mis-configuration. Vendor description: Uses generative AI to detect nuanced anomalies in sender behavior, tone, and context to surface hidden threats.

This IP is associated with a legitimate email security service that may break DKIM/SPF authentication. Failed attempts from this source may not represent actual spoofing.

Network Topology

Failures Detected from this IP
Showing 1-3 of 3 failures, affecting 4 messages
Date โ–ผ Messages
9/26/2025 1
9/23/2025 1
9/9/2025 2
External Reputation Lookups

Look up this IP in external threat intelligence and reputation databases (opens in new tab):

Nearby IPs

Other IPs in the 165.140.171.0/24 range observed failing DMARC:

165.140.171.234 (5 failures), 165.140.171.236 (3 failures), 165.140.171.117 (2 failures), 165.140.171.14 (1 failure), 165.140.171.142 (1 failure)