Microsoft CRM Dynamics - Retreiving IPs from a site

[JeremyHoman1]

Hello everyone!

I'm attempting to retrieve the IPs on the following site;

https://support.microsoft.com/en-us/help/2728473/microsoft-dynamics-crm-online-ip-address-ranges

I copied a prototype - and it has the following config -

attributes	confidence: 50 share_level: green type: IPv4
indicators	regex: ^[0-9]{1,4}\.[0-9]{1,4}\.[0-9]{1,4}\.[0-9]{1,4}
url	https://support.microsoft.com/en-us/help/2728473/microsoft-dynamics-crm-online-ip-address-ranges

My issue -

In my logs - I am seeing the processor retrieve all sorts of items from the html code itselfs; for example:

10/12/2019 17:28:50 -0500 aggregatorIPv4Inbound-TAC ACCEPT_UPDATE href="https://www.microsoft.com/en-us/store/buy" confidence: 50share_level: greensources: ["turtle"]first_seen: 1576016711840type: IPv4last_seen: 1576016711840 source_node: turtle

10/12/2019 17:28:50 -0500 aggregatorIPv4Inbound-TAC RECVD_UPDATE href="https://www.microsoft.com/en-us/store/buy" confidence: 50share_level: greensources: ["turtle"]first_seen: 1576016711840t

It looks like my regex filter is not working.  Thoughts?