Finding threats by subnet IP address shows you whether a certain group of users needs process changes or additional protection on your managed network.
For example, if you have four subnets, and only one subnet is continuously generating threat events, you can narrow down the cause of those threats. Perhaps users on that subnet have been sharing infected USB drives.