What do you mean by "catching attackers". What do you gain by having that information? And, again, 240k individual instances all "catching attackers"?

So many questions