Log in Umbrella, that our ESA search for untrusted domain

[faruqfarkhan]

Hi all i want to open discuss,

There is Log in Umbrella, that our ESA try reach for untrusted domain, here the log look like.

there is no log in ESA about email that came or send to this untrusted domain. Any idea why this is happend?

Thanks

[Dustin Anderson]

Without seeing logs my best guess is the is the system doing a reverse DNS search on the connecting IP address. With Umbrella blocking the lookup your logs probably only show the IP address and would probably be why you can't search for the domain. 

Looking up your example on google, you can search your logs for the below IP.

> mail.ekacitra.com.
Server: dns.google
Address: 8.8.8.8

Non-authoritative answer:
Name: mail.ekacitra.com
Address: 103.229.73.118