Source IPs in DMARC reports, explained

Every row of a DMARC aggregate report starts with an IP address, a message count, and one question: is this server mine? The IP itself carries more evidence than most people expect. Reverse DNS, geolo