Suspicious Connections Report report reveals traffic and conversations with IP addresses identified in blacklist databases or tracked using the IP Reputation Library.

Note: You add tracking of suspicious IPs using Internet community resources such as Tor lists from the IP Reputation Library.

Understand column data

The default view of each report contains a grid with the following columns:

  • Conversation. Host ID or IP address of source and destination endpoints (SourceHost —> DestinationHost).
  • Suspicious IP. IP address that correlates with an address known to the IP Reputation Library.
  • List Name. Descriptor for the black list source name (substring/last part of the full list name).
    • Bytes. Combined (incoming/outgoing) number of bytes transferred. (Use Report Settings

      Sort by option to rank the list by packet or flow count, not bytes.)
  • Bit Rate. Average bit rate.
  • Byte Percentage. Percentage of the total traffic.

To display Flow and Packet measurements, click a column heading ( ) for column selection list ( ). You can also include:

  • Sender Latitude. Degrees latitude associated with the endpoint's city.
  • Sender Longitude. Degrees longitude associated with the endpoint's city.
  • Receiver Latitude. Degrees latitude associated with the endpoint's city.
  • Receiver Longitude. Degrees longitude associated with the endpoint's city.

    More...

    Generate a report

    Choose source.Choose a networking device or single physical or virtual interface. Choose traffic direction across an interface.

    Choose time constraints. Choose times. (Subject to NTA collection interval and retention policies.)Choose, filter, and reorder columns. Choose and hide columns, reorder columns, and apply advanced filters to customize your data view.

    Chart, adjust output, and visualize. Apply chart, geo mapping (World Map), and display options in Report Settings dialog (optional).

  • Export report data

    Report data can be exported from WhatsUp Gold, reused, and distributed in multiple formats. Select Expand () from the Dashboard Options () menu. After the report has been expanded, select the Export Data icon to access the following options:

    • HTML. Generate and download a .htm file presenting your report data as it appears in the WhatsUp Gold user interface.
    • Excel. Generate and download a .xml spreadsheet containing your report data.
    • CSV. Generate and download a .csv file containing your report data.
    • Text. Generate and download a .txt file containing your report data.
    • Schedule Export. Set a recurring date and time, format, and email destination for report data export.