DNS
DNS Filtering
Blocks, categories, identities, and destinations. Detected rows were logged by policy and not stopped.
Requests
9,473,702
DNS queries in the window
Blocks
62,689
1% of requests
Identities in the top set
7
Users, devices, and networks
Blocks over time
Security and content blocks together. Requests are on the stat above because the scale is different.
Categories
Share of blocks in the window.
Malware13,165
Phishing11,284
Newly seen domains9,403
Potentially harmful8,776
Command and control6,896
Proxy / anonymizer5,015
Cryptomining4,388
Dynamic DNS3,761
Identities
Who generated the blocks. Guest wireless leads, which is expected.
guest-wifi8,776
Network
james.okonkwo4,388
User
kiosk-lobby3,761
Device
ruth.adeyemi3,134
User
research-lab3,134
Network
chris.palumbo2,508
User
hannah.cho1,881
User
Destinations
Reserved example names standing in for the real block list.
| Domain | Category | Blocks |
|---|---|---|
| vpn-update.example | Phishing | 5,015 |
| cdn-sync.example | Newly seen domains | 3,761 |
| paste-drop.example | Proxy / anonymizer | 2,508 |
| pool.example | Cryptomining | 1,881 |
| relay.example | Phishing | 1,881 |
| upload.example | Potentially harmful | 1,254 |
Notable DNS events
Tied to investigations where a name was blocked or only logged.
| Id | When | Identity | Domain | Category | Action |
|---|---|---|---|---|---|
| UMB-7690 | 17 Oct 19:08 | guest-wifi | pool.example | Cryptomining | Blocked |
| UMB-7704 | 17 Oct 13:08 | AMHS-WS-0902 | cdn-sync.example | Newly seen domains | Blocked |
| UMB-7412 | 17 Oct 08:08 | kiosk-lobby | vpn-update.example | Phishing | Blocked |
| UMB-7721 | 16 Oct 20:08 | AMHS-SRV-FS-03 | resolver-edge.example | Dynamic DNS | Detected |
| UMB-7404 | 16 Oct 06:08 | james.okonkwo | paste-drop.example | Proxy / anonymizer | Blocked |
| UMB-7640 | 14 Oct 14:08 | AMHS-WS-1188 | relay.example | Command and control | Blocked |
| UMB-7511 | 8 Oct 18:08 | AMHS-WS-3302 | study-host.example | Newly seen domains | Detected |
| UMB-7488 | 5 Oct 10:08 | chris.palumbo | upload.example | Potentially harmful | Detected |