H3C MSR Series Command Reference Manual page 1048

by-type: Displays all attack statistics by attack type.
by-victim: Displays top ten attack statistics by victim.
Usage guidelines
If you do not specify the by-attacker, by-type, or by-victim keyword, this command displays attack
statistics by attacker, victim, attack type.
Examples
# Display top ten attack statistics in the most recent 1 hour.
<Sysname> display attack-defense top-attack-statistics last-1-hour
Top attackers:
No. VPN instance
1 vpn1
2 vpn1
3 vpn2
4 vpn3
5 vpn2
6 vpn2
7 vpn3
8 vpn2
9 vpn2
10 vpn1
Top victims:
No. VPN instance
1 vpn2
2 vpn2
3 vpn3
4 vpn2
5 vpn1
6 vpn1
7 vpn1
8 vpn1
9 vpn2
10 vpn3
Top attack types:
Attack type
Scan
Syn
Table 164 Command output
Field
Top attackers
No.
VPN instance
Attacks
Attacker IP
200.200.200.55
200.200.200.21
200.200.200.133
200.200.200.19
200.200.200.4
200.200.200.155
200.200.200.93
200.200.200.67
200.200.200.70
200.200.200.23
Victim IP
200.200.200.12
200.200.200.32
200.200.200.14
200.200.200.251
200.200.200.10
200.200.200.77
200.200.200.96
200.200.200.22
200.200.200.154
200.200.200.18
Attacks
155
155
Description
Top ten attack statistics by attacker.
Rank on the list.
VPN instance to which the attacker or victim belongs. If the attacker or
victim belongs to the public network, this field displays a hyphen (-).
Number of attack packets that have been dropped.
1025
Attacks
21
16
12
10
8
8
5
3
1
1
Attacks
21
16
12
12
7
6
2
2
2
1