This is a demonstration. Everything on this page is invented sample data — nothing here comes from a real deployment. Back to the demo easysiem.com

IPs by Alerts

Every address appearing in a real detection, ranked by how many alerts it appears in — a different question from Geo IP, which ranks countries by raw event volume and so lets a chatty CDN outrank a host that tripped one critical rule. Both ends of each alert count.

—
Addresses
—
External
—
Alerts
—
Critical / high
Severity mixclick a band to filter
Addresses seen in alerts
Address Alerts Severity Activity Last seen
Loading…