FortiBleed Related Network Connections

nomit vyas@xoxo

•updated Jun 24, 2026•1•0•10

Detects network connections to known IP addresses associated with FortiBleed activity, including C2, pentest labs, credential validation, and sniffer nodes. This rule helps identify potential compromise or reconnaissance related to the FortiBleed vulnerability.