Possibly to mute "attacks" from one ip address?

[rmoc]

Someone's doing scans from another area of my org.  That's ok, but it's blowing up my SEPM logs and alerts.  Is there any way to "mute" attacks from a certain ip address?

[Stefan]

If you know who is doing these scans (for example if they are authorized Vulnerability scans) then you can exclude the IP address in the Intrusion Prevention Policy -> Excluded hosts.