I need help please with this network security question

The IPS hosted at your company has not detected an illegitimate HTTPS connection from 88.5.64.2 to your e-banking web server. Upon checking your database, you found that a severe damage was caused by that remote connection based on a recently discovered vulnerability. In which of the following do you classify that attempt? how to mitigate future similar attacks? What should be done on the IPS level to mitigate similar future attacks.