# CVEHarbor Threat IP Intelligence | 2026-10-28T17:58:02.803589+00:00
# Permanent logical group: Suspicious IP Block
# Cumulative indexed IPs: 20
# New since prior published snapshot: 0
# REVIEW ONLY: reported indicators are NOT approved firewall blocks.
# Do not apply blindly. Check allowlists, cloud/VPN ownership and your logs.
# No rules or policies are created or enabled. No old IPs are removed.
# The incremental file is not a comparison against your firewall.
# If you skipped an update, use the cumulative file and reconcile existing objects.
# Collection timestamps are NOT verified source last-seen times.

# FortiOS. Run in the correct VDOM following change control.
# The group must exist before the incremental update is used.
# If an address object name already exists with a different subnet, STOP.
# Applying group membership can affect an existing deny policy immediately.
config firewall address
end
config firewall addrgrp
    edit "Suspicious IP Block"
    next
end
# No firewall policy has been created. Review existing policy use.