FortiBleed Related Network Connections

nomit vyas@xoxo

•updated Jun 24, 2026•1•0•7

This rule detects network connections to known IP addresses associated with the FortiBleed vulnerability exploitation. The rule categorizes the threat based on the specific IP address, indicating potential C2, pentest lab activity, credential validation, or sniffer nodes.