Top IPS-Detected Attackers

You can create a report that ranks IPS-detected attackers.

Top IPS-Detected Attacker Report

Follow the steps below to check Top IPS-Detected Attacker Report.

1. Select Report on the top of the page.
2. Select Create Report tab.
3. If a report exists, you can check it from the list or look up the desired report through search.
4. From the name column of the list, check Top IPS-Detected Attacker Report and click [View] on the bottom side of the Created On column. You can check the basic info of agents and the following in the Top IPS-Detected Attacker Report.

• Group: Name of the group the agent is in.
• Period: The period when the IPS-detected attackers were confirmed.
• Time: Time when the report was created.
• Total: Displays the rank of IPS-detected attackers during the period.
• Rank: The rank of the IPS-detected attackers. The higher the rank of the attacker, the higher the number of detection.
• Attacker: The IP address of the IPS-detected attacker.
• No. of Detections: The number of IPS-detections.
• No. of Detected Agents: Click the number shown for No. of Detected Agents to check Agent Details.

5. Click on the top side of the screen to close the window.

Agent Details

You can check the details of the agent.

• Network Status: Shows whether the agent is connected to a network or not.
• IP: The IP address of the agent.
• Group: Name of the group the agent is in.
• Computer Name: The name of the PC as set in the system settings.
• No. of Detections: The number of detections by the agent.