Sh4mefulNetwork: AMAZO-4
This is (part of) the AWS public cloud. Some email protection services run in AWS, but it is also an attack/spam vector.
This page shows DMARC authentication failures originating from the AMAZO-4 network. Learn more about this data.
Analysis
This network has contributed 15 unique IP addresses across 388 failed authentication events, accounting for 971 messages. Activity spans from March 5, 2024 to May 22, 2026, with peak volume in September 2025 (98 events). The top countries by failure volume are United States (60%), Ireland (40%). The most active source IPs from this network include 100.21.157.149 (217 failures), 100.24.129.5 (205 failures), 99.80.189.20 (132 failures). Failures from AMAZO-4 (Amazon) are concentrated in two countries, which may indicate a targeted campaign or regionally hosted infrastructure.
Failures Detected from this Network
Showing 351-388 of 388 failures, affecting 971 messages| Date ▼ | Source IP | Country | Messages |
|---|---|---|---|
| 11/6/2024 | US | 1 | |
| 10/23/2024 | US | 4 | |
| 10/23/2024 | US | 4 | |
| 10/23/2024 | IE | 1 | |
| 10/23/2024 | IE | 4 | |
| 10/23/2024 | IE | 1 | |
| 9/27/2024 | US | 6 | |
| 9/27/2024 | US | 8 | |
| 9/27/2024 | IE | 1 | |
| 9/27/2024 | IE | 3 | |
| 9/25/2024 | US | 1 | |
| 9/25/2024 | US | 1 | |
| 9/25/2024 | US | 1 | |
| 9/25/2024 | IE | 1 | |
| 9/20/2024 | US | 3 | |
| 9/20/2024 | US | 3 | |
| 9/20/2024 | IE | 2 | |
| 9/18/2024 | US | 2 | |
| 9/18/2024 | US | 10 | |
| 9/18/2024 | IE | 2 | |
| 9/18/2024 | IE | 3 | |
| 9/13/2024 | US | 3 | |
| 9/13/2024 | US | 6 | |
| 9/13/2024 | IE | 3 | |
| 9/13/2024 | IE | 3 | |
| 9/6/2024 | US | 1 | |
| 8/21/2024 | US | 1 | |
| 8/7/2024 | US | 1 | |
| 6/26/2024 | US | 1 | |
| 6/26/2024 | US | 1 | |
| 6/12/2024 | US | 1 | |
| 5/31/2024 | US | 3 | |
| 5/10/2024 | US | 1 | |
| 4/17/2024 | US | 1 | |
| 3/13/2024 | US | 1 | |
| 3/13/2024 | US | 2 | |
| 3/13/2024 | IE | 1 | |
| 3/5/2024 | US | 1 |