Reasons
- High severity exploit activity was observed, but only from a single node.
- Further attacks within a short window, permanent ban applied based on indicators of persistence attacks.
MITRE ATT&CK Mappings
Evidence
- Nodes observed: 1
- Severity: CRITICAL
- TTL remaining: 12d 5h