IMSS creates
log entries of the IP addresses or domains that have sent messages
violating scanning conditions, but are still not blocked because the
total number of messages did not exceed the threshold you set for
the given time period.
Procedure
Go to IP Filtering → Suspicious IP.
Configure any of the following:
Next to Type, select
the check boxes next to the type of threat that the IP filter detected.
Next to Dates, select the date-time
range within which IMSS blocked
the sender.
If you know a specific IP address to query, specify it
next to IP.
To display the corresponding domain names of the IP addresses,
select the Show Domain names check box.
Next to Logs per page, select
the number of log entries to display on the screen at a time.
Click Display Log.
Perform any of the additional actions:
To block an IP address temporarily, select the
corresponding check box in the list, then click Block
Temporarily.
To block an IP address permanently, select the corresponding
check box in the list, then click Block Permanently.
To change the number of items that appears in the list
at a time, select a new display value from the drop-down box on
the top of the table.
