Event destination IP address is listed on one of more blocklists as having an IOC - Indication of compromise.

Related Solution

AIS Managed SIEM

SIEM Events

Threat Intelligence Alert Destination IP Threat Indicated

dst_ip_threat_indicated:true updated