{
  "metadata": {
    "generator": "Bulwark Black IOC Extractor",
    "source": "https://bulwarkblack.com/fortibleed-fortinet-vpn-ransomware-incident-response/",
    "fang": "live",
    "exported_at": "2026-10-07T01:04:41Z",
    "total": 24,
    "categories": 3
  },
  "iocs": {
    "IPv4": [
      "103.27.186.156",
      "104.28.155.27",
      "154.202.59.169",
      "185.136.15.43",
      "185.136.15.66",
      "185.199.199.56",
      "193.8.186.33",
      "193.8.187.2",
      "193.8.187.42",
      "45.154.12.132",
      "45.155.250.158",
      "45.227.254.210",
      "66.175.220.111",
      "77.91.118.10",
      "80.75.212.113",
      "85.11.187.8",
      "87.251.64.13",
      "87.251.64.16",
      "87.251.64.17",
      "87.251.64.44"
    ],
    "Domains": [
      "socradar.io",
      "www.cloudsek.com"
    ],
    "URLs": [
      "https://socradar.io/blog/fortibleed-fortinet-firewalls-compromised/",
      "https://www.cloudsek.com/blog/inside-the-fortibleed-open-directory-a-technical-analysis-of-what-the-"
    ]
  }
}