Views:
The Blocked Message Details chart on the Threats tab of Dashboard displays the number of messages blocked for different reasons.
Select a time period by Date, Week, Month, or Last 12 months to show data for the selected time period.
The specified time period only affects the data shown on this chart and its corresponding thumbnail chart on the Threats tab. Changing these selections does not affect other charts.
The following is the specific data displayed:

Values on Charts

Value
Description
Sender IP found in QIL
The number of messages blocked because the sender IP address was detected in the Quick IP List (QIL)
Sender IP found in KSSL
The number of messages blocked because the sender IP address was found in the Known Spam Source List (KSSL)
Sender IP found in DUL
The number of messages blocked because the sender IP address was found in the Dynamic User List (DUL)
Sender IP found in ETL
The number of messages blocked because the sender IP address was found in the Emerging Threat List (ETL)
Sender IP found in block list
The number of messages blocked because the sender IP address was found in the Blocked IP Address list or Blocked Country/Region list
Sender IP blocked
The number of messages blocked because the sender IP address was found in the internal global block list
Sender IP not allowed
The number of messages blocked because the sender IP address was not in the Outbound Servers under Domain Management
Sender blocked (block list)
The number of messages blocked because the sender email address was found in the blocked sender list or the internal global block list
Sender blocked (Suspicious Object List)
The number of messages blocked because the sender email address was found in the Suspicious Object List synchronized from Trend Vision One
Sender domain not found
The number of messages blocked because the sender domain was not found in the public DNS system
Sender domain malformed
The number of messages blocked because the sender’s DNS record was found malformed
Recipient blocked
The number of messages blocked because the recipient email address was found in the internal global block list
Recipient invalid
The number of messages blocked because the recipient was not in the Valid Recipient list when Recipient Directory Management is enabled
Recipient domain not found
The number of messages blocked because the recipient domain was not found in the public DNS system
Recipient domain malformed
The number of messages blocked because the recipient’s DNS record was found malformed
Message count limit reached (by IP address)
The number of messages blocked because the total number of messages sent from a single IP address exceeded the maximum limit in a certain period
Message count limit reached (by email address)
The number of messages blocked because the total number of messages sent from or to a single email address exceeded the maximum limit in a certain period
Data size limit reached (by IP address)
The number of messages blocked because the accumulated data size from a single IP address exceeded the maximum limit in a certain period
Data size limit reached (by email address)
The number of messages blocked because the accumulated data size from or to a single email address exceeded the maximum limit in a certain period
Data size limit reached (by domain)
The number of messages blocked because the accumulated data size from or to a single domain exceeded the maximum limit in a certain period
TLS not available
The number of messages blocked because the email client did not use TLS or the TLS version used by the peer was lower than the minimum version required to communicate with Trend Micro Email Security
Reverse DNS validation failed
The number of messages blocked because the message failed reverse DNS validation
Message too big
The number of messages blocked because the message size exceeded the maximum
Policy matching error
The number of messages blocked because an error occurred during policy matching
Other
The number of messages blocked due to other reasons
Total
The total number of email messages blocked