Top Receivers with the Most Failed Connections

Top Receivers with the Most Failed Connections report reveals devices that initiated the highest number of unsuccessful TCP connection attempts, or SYN packets.

Unsuccessful connections (incomplete TCP handshakes) can imply port scanning, penetration testing, and methods used by security testers or hackers to find potential intrusion points on a network. Large numbers of these half-open or incomplete connections can also denote an attempt at a denial of service (DoS) attack.

Several report columns do not appear by default and can be configured to display in this report. You can display the following additional report columns:

Tip: To view a larger version of this report with all of its columns displayed, click Open a copy on the report menu.

Generate a report

Choose source. , Choose a networking device or single physical or virtual interface you want to see Top Receivers with the Most Failed Connections measurements for. Choose traffic direction across an interface.

Choose time constraints. BusinessHours Choose times for the Top Receivers with the Most Failed Connections.

Choose, filter, and reorder columns. Choose and hide columns, reorder columns, and apply advanced filters to customize your data view.

Chart, adjust output, and visualize. Fine tune report presentation and range of values displayed using the Report Settings dialog (optional).

Print, share, and export

Generated Top Receivers with the Most Failed Connections report data can be visualized, shared, and reused:

See Also

Receivers

Top Receivers

Top Receiver ASN

Top Receiver Cities

Top Receiver Domains

Top Receiver Groups

Top Receiver TLDs

Top Receivers with the Most Conversation Partners