If I block an app, how can I later see what host/ip address the app was trying to connect to?

[dallas7]

@Ken_GlassWire

we don’t save the host since the connection failed, but perhaps we should look at doing that for the future.

Saving the host is irrelevant, unless I misunderstand your exact meaning.

I noted on this a ways back… May, 2017.

First Network Access not logged?

I’m not seeing any logging under Alerts for a First Network Access where one chooses to allow or block. Is that correct? It is not until First Network Activity that anything appears under Alerts. Thanks.

Given if deny is chosen it’s because the user determined (read: panicked) as such and then there is no way to find out what was involved.

The info should be available after the fact and gleaned from an entry in Alerts as “First network activity - Network access denied,” not in “Ask to connect” when a possibly malicious process is fully active albeit waiting on a connection.

As well a “Network access allowed” should be posted. Because this and denied are similarly not posted in alerts until an actual allowed actual, but NOT denied, connection is made. That is, there is a only “connection initiated” alert, but not a “connection blocked.”

The lack of complete and differentiated “access” and “connection” alert posts for allow and deny has been IMHO a One Big Fail in the otherwise superb features in GlassWire.