Need to find out which site in the network is being targeted by attackers

I'm using Defender on a Wordpress Network. I've had 3100 lockouts overnight. But I can't see which of the sites in the network is being targeted.