Investigating a Specific Sending Source

You can drill down to a specific sending source for a particular domain to investigate the IP addresses from which the sending source sent emails on behalf of the domain.

To do that, after you drill down to the specific domain, click on one of the source names in the Sent via Source column. The system shows these details:

Column Description
IP Address

IP address of the sending source.

For more information about the IP address, see Investigating a Single Sending IP Address.

Location The geo-location of the IP address.
Reported Emails The number of reported emails sent from this IP address by the source.
Reported Failed Emails The number of emails sent from this IP address, which failed DMARC authentication.
DMARC % Failures The percentage of emails that failed DMARC out of the total number of emails sent from the IP address.
SPF % Failures The percentage of emails that failed SPF out of the total number of emails sent from the IP address.
DKIM % Failed The percentage of emails that failed DKIM out of the total number of reported emails sent from the IP address.
Number of Reporters The number of unique organizations that reported emails being sent from this IP address.
Number of Envelope The number of unique envelops to values in emails sent from this IP address.