Sh4mefulNetwork: MSFT
Differentiating between Office 365, including email protection services, and Azure (public cloud) when diagnosing incidents is challenging because they utilize shared Microsoft-owned IP ranges. Most of this is probably O365/Outlook or Defender protection breaking DKIM and SPF authentication. Disambiguation is a work-in-progress.
This page shows DMARC authentication failures originating from the MSFT network. Learn more about this data.
Analysis
This network has contributed 3,324 unique IP addresses across 10,359 failed authentication events, accounting for 13,175 messages. Activity spans from March 12, 2024 to April 10, 2026, with peak volume in September 2024 (1,998 events). The top countries by failure volume are United States (88%), Ireland (3%), The Netherlands (3%). The most active source IPs from this network include 104.47.57.168 (75 failures), 104.47.58.168 (68 failures), 104.47.56.169 (64 failures). Failures from MSFT (Microsoft) span 18 countries with no dominant source, which is consistent with forwarding infrastructure, relay services, or broadly distributed automated activity.
Failures Detected from this Network
Showing 1-50 of 10,359 failures, affecting 13,175 messages| Date ▲ | Source IP | Country | Messages |
|---|---|---|---|
| 3/12/2024 | US | 1 | |
| 3/12/2024 | NL | 1 | |
| 3/12/2024 | NL | 2 | |
| 3/12/2024 | AT | 1 | |
| 3/12/2024 | NL | 1 | |
| 3/12/2024 | US | 1 | |
| 3/12/2024 | US | 2 | |
| 3/12/2024 | US | 1 | |
| 3/12/2024 | US | 1 | |
| 3/12/2024 | US | 1 | |
| 3/13/2024 | NL | 2 | |
| 3/13/2024 | US | 1 | |
| 3/13/2024 | US | 1 | |
| 3/13/2024 | US | 2 | |
| 3/13/2024 | US | 1 | |
| 3/13/2024 | US | 2 | |
| 3/13/2024 | IE | 1 | |
| 3/13/2024 | AT | 1 | |
| 3/13/2024 | AT | 1 | |
| 3/13/2024 | IE | 1 | |
| 3/13/2024 | NL | 1 | |
| 3/13/2024 | US | 1 | |
| 3/13/2024 | US | 1 | |
| 3/13/2024 | US | 9 | |
| 3/13/2024 | US | 4 | |
| 3/13/2024 | US | 8 | |
| 3/13/2024 | US | 6 | |
| 3/13/2024 | US | 9 | |
| 3/13/2024 | US | 6 | |
| 3/13/2024 | US | 1 | |
| 3/13/2024 | US | 5 | |
| 3/13/2024 | US | 9 | |
| 3/13/2024 | US | 5 | |
| 3/13/2024 | US | 4 | |
| 3/13/2024 | US | 3 | |
| 3/13/2024 | US | 5 | |
| 3/13/2024 | US | 7 | |
| 3/13/2024 | US | 4 | |
| 3/13/2024 | US | 4 | |
| 3/13/2024 | US | 7 | |
| 3/13/2024 | US | 9 | |
| 3/13/2024 | US | 1 | |
| 3/13/2024 | US | 7 | |
| 3/13/2024 | US | 9 | |
| 3/13/2024 | US | 6 | |
| 3/13/2024 | US | 5 | |
| 3/13/2024 | US | 3 | |
| 3/13/2024 | US | 9 | |
| 3/13/2024 | US | 2 | |
| 3/13/2024 | US | 5 |