Top Receivers with the Most Failed Connections report reveals devices that received the highest number of unsuccessful TCP connection attempts, or SYN packets.

Unsuccessful connections (incomplete TCP handshakes) can imply port scanning, penetration testing, and methods used by security testers or hackers to find potential intrusion points on a network. Large numbers of these half-open or incomplete connections can also denote an attempt at a denial of service (DoS) attack.

Understand column data

The default view of each report contains a grid with the following columns:

  • Receiver. Host name of the top receiver with the most failed connections.
    • Location. Field composed of top combined Cities with, State, and Country identifiers included.
  • City. Top receiver's city.
  • Connection Attempts. Number of failed connection attempts.
  • Packet Rate. Total average packet rate.
  • Packet Percentage. Percentage of top n items ranked.

Several report columns do not appear by default and can be configured to display in this report. You can display the following additional report columns:

  • IP address. Receiver's IP address.
  • Hostname. Receiver's hostname.
  • Subdivision. Subdivision for the current city.
  • Country. Country for the current city.
  • Latitude. Degrees latitude associated with the current city.
  • Longitude. Degrees longitude associated with the current city.
Tip: To show reports in full screen with most if not all possible columns, click on report options menu and choose Expand.

Generate a report

Choose source.Choose a networking device or single physical or virtual interface. Choose traffic direction across an interface.

Choose time constraints. Choose times. (Subject to NTA collection interval and retention policies.)Choose, filter, and reorder columns. Choose and hide columns, reorder columns, and apply advanced filters to customize your data view.

Chart, adjust output, and visualize. Apply chart, geo mapping (World Map), and display options in Report Settings dialog (optional).

  • Export report data

    Report data can be exported from WhatsUp Gold, reused, and distributed in multiple formats. Select Expand () from the Dashboard Options () menu. After the report has been expanded, select the Export Data icon to access the following options:

    • HTML. Generate and download a .htm file presenting your report data as it appears in the WhatsUp Gold user interface.
    • Excel. Generate and download a .xml spreadsheet containing your report data.
    • CSV. Generate and download a .csv file containing your report data.
    • Text. Generate and download a .txt file containing your report data.
    • Schedule Export. Set a recurring date and time, format, and email destination for report data export.