Sh4mefulNetwork: MSFT
Differentiating between Office 365, including email protection services, and Azure (public cloud) when diagnosing incidents is challenging because they utilize shared Microsoft-owned IP ranges. Most of this is probably O365/Outlook or Defender protection breaking DKIM and SPF authentication. Disambiguation is a work-in-progress.
This page shows DMARC authentication failures originating from the MSFT network. Learn more about this data.
Analysis
This network has contributed 3,325 unique IP addresses across 10,360 failed authentication events, accounting for 13,176 messages. Activity spans from March 12, 2024 to May 1, 2026, with peak volume in September 2024 (1,998 events). The top countries by failure volume are United States (88%), Ireland (3%), The Netherlands (3%). The most active source IPs from this network include 104.47.57.168 (75 failures), 104.47.58.168 (68 failures), 104.47.56.169 (64 failures). Failures from MSFT (Microsoft) span 18 countries with no dominant source, which is consistent with forwarding infrastructure, relay services, or broadly distributed automated activity.
Failures Detected from this Network
Showing 9,651-9,700 of 10,360 failures, affecting 13,176 messages| Date ▼ | Source IP | Country | Messages |
|---|---|---|---|
| 9/13/2024 | US | 1 | |
| 9/13/2024 | US | 1 | |
| 9/13/2024 | US | 1 | |
| 9/13/2024 | US | 1 | |
| 9/13/2024 | US | 1 | |
| 9/13/2024 | US | 1 | |
| 9/13/2024 | US | 1 | |
| 9/13/2024 | US | 1 | |
| 9/13/2024 | US | 1 | |
| 9/13/2024 | US | 1 | |
| 9/13/2024 | US | 1 | |
| 9/13/2024 | US | 1 | |
| 9/13/2024 | US | 1 | |
| 9/13/2024 | US | 1 | |
| 9/13/2024 | US | 1 | |
| 9/13/2024 | US | 1 | |
| 9/13/2024 | US | 1 | |
| 9/13/2024 | IE | 1 | |
| 9/13/2024 | NL | 1 | |
| 9/13/2024 | NL | 1 | |
| 9/13/2024 | NL | 1 | |
| 9/13/2024 | DE | 1 | |
| 9/13/2024 | NO | 1 | |
| 9/13/2024 | NO | 1 | |
| 9/13/2024 | NO | 1 | |
| 9/13/2024 | NO | 1 | |
| 9/13/2024 | NO | 1 | |
| 9/13/2024 | NO | 1 | |
| 9/13/2024 | IE | 1 | |
| 9/13/2024 | IE | 1 | |
| 9/13/2024 | IE | 1 | |
| 9/13/2024 | US | 1 | |
| 9/13/2024 | US | 1 | |
| 9/13/2024 | US | 1 | |
| 9/13/2024 | US | 1 | |
| 9/13/2024 | AT | 2 | |
| 9/13/2024 | AT | 1 | |
| 9/13/2024 | AT | 1 | |
| 9/13/2024 | US | 1 | |
| 9/13/2024 | US | 1 | |
| 9/13/2024 | US | 1 | |
| 9/13/2024 | US | 1 | |
| 9/13/2024 | US | 1 | |
| 9/13/2024 | US | 1 | |
| 9/13/2024 | US | 1 | |
| 9/13/2024 | US | 1 | |
| 9/13/2024 | US | 1 | |
| 9/13/2024 | US | 1 | |
| 9/13/2024 | US | 1 | |
| 9/13/2024 | US | 1 |