Sh4mefulIP Address: 52.89.255.11 ⚠ IP Confounder
⚠ IP Confounder Detected: Cloudflare One (formerly Area 1) Email Security - Cloudflare's Email security uses Artificial Intelligence (AI), threat intelligence, and expert security rules to analyze every incoming email. We've seen situations where this breaks SPF, DKIM and DMARC auth.
This IP is associated with a legitimate email security service that may break DKIM/SPF authentication. Failed attempts from this source may not represent actual spoofing.
This IP is associated with a legitimate email security service that may break DKIM/SPF authentication. Failed attempts from this source may not represent actual spoofing.
ℹ️ Network Annotation: Amazon Web Services (AWS)
Last updated: 1/29/2026
This is (part of) the AWS public cloud. Some email protection services run in AWS, but it is also an attack/spam vector.
This page shows DMARC authentication failure data for this IP address. Learn more about this data.
Geolocation Information
- Country:
- US United States
- Region:
- Oregon
- City:
- Boardman
- Coordinates:
- 45.8401, -119.705
WHOIS Information
- Network Name:
- AT-88-Z
- CIDR:
52.88.0.0/13, 52.84.0.0/14- Owner:
- Amazon Technologies Inc.
- Org ID:
AT-88-Z- Address:
- 410 Terry Ave N., Seattle, WA 98109
- Reverse DNS:
-
mailstream-uswest-egress001.mxrecord.io
Last updated: 2/5/2026
Analysis
This IP was first observed on March 13, 2024 and most recently on March 27, 2026. It has been associated with 39 failed authentication events affecting 64 messages, representing significant volume. The IP belongs to AT-88-Z (Amazon Technologies Inc.), a network with activity associated with United States.
Failures Detected from this IP
Showing 1-39 of 39 failures, affecting 64 messages| Date ▼ | Messages |
|---|---|
| 3/27/2026 | 1 |
| 1/15/2026 | 1 |
| 1/8/2026 | 1 |
| 12/11/2025 | 1 |
| 10/24/2025 | 1 |
| 10/2/2025 | 1 |
| 10/1/2025 | 2 |
| 9/26/2025 | 3 |
| 9/24/2025 | 1 |
| 9/12/2025 | 1 |
| 9/9/2025 | 1 |
| 9/3/2025 | 3 |
| 7/10/2025 | 2 |
| 7/9/2025 | 1 |
| 7/1/2025 | 1 |
| 6/27/2025 | 1 |
| 6/4/2025 | 2 |
| 5/28/2025 | 3 |
| 4/30/2025 | 1 |
| 4/18/2025 | 1 |
| 3/19/2025 | 2 |
| 1/17/2025 | 2 |
| 1/8/2025 | 2 |
| 12/20/2024 | 1 |
| 12/19/2024 | 2 |
| 12/11/2024 | 1 |
| 11/22/2024 | 1 |
| 11/20/2024 | 1 |
| 11/13/2024 | 1 |
| 11/12/2024 | 1 |
| 10/30/2024 | 2 |
| 10/23/2024 | 5 |
| 9/27/2024 | 3 |
| 9/25/2024 | 1 |
| 9/18/2024 | 2 |
| 9/13/2024 | 2 |
| 8/21/2024 | 1 |
| 5/10/2024 | 1 |
| 3/13/2024 | 4 |
External Reputation Lookups
Look up this IP in external threat intelligence and reputation databases (opens in new tab):