FortiBleed Related Network Connections

nomit vyas@xoxo

•updated Jun 24, 2026•0•0•2

This rule detects network connections to known IP addresses associated with FortiBleed activity, including C2, pentest labs, credential validation, and sniffer nodes. It identifies both successful connections and connection attempts.