In Incidents & Events, you can define subnet lists which can be added to subnet groups.
Subnet lists and groups can be used to create a allowlist or blocklist in event handlers.
Subnet filtering for event handlers is supported in FortiGate, FortiWeb, FortiMail, and Fabric ADOMs.