Whether malicious domains associated with the attacker's IP have been blocked.
Port Scan boolean
incident_maliciousdomainsblocked
maliciousdomainsblocked