How to check which client hit the threat?

Zyxel_Jerry

Navigate to Side-wide > Monitor > Threat report

Click the Threats detected by category and click the Category in the column

Click the Domain name

And you can check which clients hit the threat category