Identification of low reputation IPs in the aggregate report view