cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
222
Views
0
Helpful
1
Replies

Log in Umbrella, that our ESA search for untrusted domain

faruqfarkhan
Level 1
Level 1

Hi all i want to open discuss,

There is Log in Umbrella, that our ESA try reach for untrusted domain, here the log look like.

faruqfarkhan_1-1706254148003.png
faruqfarkhan_2-1706254180119.png

there is no log in ESA about email that came or send to this untrusted domain. Any idea why this is happend?

Thanks


 





 

1 Reply 1

Without seeing logs my best guess is the is the system doing a reverse DNS search on the connecting IP address. With Umbrella blocking the lookup your logs probably only show the IP address and would probably be why you can't search for the domain. 

 

Looking up your example on google, you can search your logs for the below IP.

> mail.ekacitra.com.
Server: dns.google
Address: 8.8.8.8

Non-authoritative answer:
Name: mail.ekacitra.com
Address: 103.229.73.118

 

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: