IMSS creates log entries of the IP addresses
or domains that have sent messages violating scanning conditions, but are still not
blocked because the total number of messages did not exceed the threshold you set
for the given time period.
Procedure
Go to Sender Filtering → Suspicious IP.
Configure any of the following:
Next to Type, select the check boxes next to the type of
threat that the IP filter detected.
Next to Dates, select the date-time range within which
IMSS blocked the sender.
If you know a specific IP address to query, specify it next to
IP.
To display the corresponding domain names of the IP addresses, select the
Show Domain names check box.
Next to Logs per page, select the number of log entries
to display on the screen at a time.
Click Display Log.
Perform any of the additional actions:
To block an IP address temporarily, select the corresponding check box in the
list, then click Block Temporarily.
To block an IP address permanently, select the corresponding check box in the
list, then click Block Permanently.
To change the number of items that appears in the list at a time, select a new
display value from the drop-down box on the top of the table.
